CVE-2013-0640 Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted P...
HighCVSS 7.8
EPSS 86.9%
CISA KEV
added 2022-03-03 · due 2022-03-24
Exploited in the wild
Public exploit
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | >= 9.0, < 9.5.4 | 9.5.4 |
| Adobe acrobat | >= 10.0, < 10.1.6 | 10.1.6 |
| Adobe acrobat | >= 11.0, < 11.0.02 | 11.0.02 |
| Adobe Acrobat Reader | >= 10.0, < 10.1.6 | 10.1.6 |
| Adobe Acrobat Reader | >= 11.0, < 11.0.02 | 11.0.02 |
| Adobe Acrobat Reader | >= 9.0, < 9.5.4 | 9.5.4 |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp2 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux eus | = 5.9 | No fix listed |
| redhat enterprise linux eus | = 6.4 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server aus | = 5.9 | No fix listed |
| redhat enterprise linux server aus | = 6.4 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- blog.fireeye.com broken-link
- blogs.adobe.com broken-link
- openSUSE-SU-2013:0335 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:0342 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2013:0349 mailing-list third-party-advisory vendor-advisory
- RHSA-2013:0551 third-party-advisory vendor-advisory
- GLSA-201308-03 third-party-advisory vendor-advisory
- www.adobe.com vendor-advisory
- www.adobe.com broken-link
- VU#422807 third-party-advisory us-government-resource
- oval:org.mitre.oval:def:16406 broken-link signature vdb-entry
- www.cisa.gov government-resource us-government-resource