CVEvulnerability

CVE-2013-3346

9.8 CRITICAL Known exploited Published 2013-08-30 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

Adobe Reader and Acrobat Memory Corruption Vulnerability — Adobe Reader and Acrobat

Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.

Added to KEV
2022-03-03
Remediation due
2022-03-24
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2013-3346
Status
Analyzed
Published
2013-08-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-787

Description

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.

Affected configurations

• adobe acrobat (>= 9.0 < 9.5.5) • adobe acrobat (>= 10.0 < 10.1.7) • adobe acrobat (>= 11.0 < 11.0.03) • adobe acrobat reader (>= 9.0 < 9.5.5) • adobe acrobat reader (>= 10.0 < 10.1.7) • adobe acrobat reader (>= 11.0 < 11.0.03)

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References