Veille CVE
CVE-2013-0641
7.8 Élevée Exploitée activementCatalogue CISA KEV — Adobe Reader Buffer Overflow Vulnerability
Ajoutée le 03/03/2022 · Échéance de correction (agences US) : 24/03/2022
Action requise : Apply updates per vendor instructions.
Description
Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 7.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 2.0 | 9.3 Élevée | nvd@nist.gov (NVD) | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html Broken Link
- http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html Broken LinkVendor Advisory
- http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html Mailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0551.html Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201308-03.xml Third Party Advisory
- http://www.adobe.com/support/security/advisories/apsa13-02.html Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb13-07.html Broken Link
- http://www.kb.cert.org/vuls/id/422807 Third Party AdvisoryUS Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296 Broken Link
- http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html Broken Link
- http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html Broken LinkVendor Advisory
- http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html Mailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html Mailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0551.html Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201308-03.xml Third Party Advisory
- http://www.adobe.com/support/security/advisories/apsa13-02.html Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb13-07.html Broken Link
- http://www.kb.cert.org/vuls/id/422807 Third Party AdvisoryUS Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296 Broken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0641 US Government Resource