CVE-2013-0641 Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in....
HighCVSS 7.8
EPSS 32.3%
CISA KEV
added 2022-03-03 · due 2022-03-24
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | >= 9.0, < 9.5.4 | 9.5.4 |
| Adobe acrobat | >= 10.0, < 10.1.6 | 10.1.6 |
| Adobe acrobat | >= 11.0, < 11.0.02 | 11.0.02 |
| Adobe Acrobat Reader | >= 10.0, < 10.1.6 | 10.1.6 |
| Adobe Acrobat Reader | >= 11.0, < 11.0.02 | 11.0.02 |
| Adobe Acrobat Reader | >= 9.0, < 9.5.4 | 9.5.4 |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux eus | = 5.9 | No fix listed |
| redhat enterprise linux eus | = 6.4 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server aus | = 5.9 | No fix listed |
| redhat enterprise linux server aus | = 6.4 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| opensuse | = 12.1 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp2 | No fix listed |
References
- blog.fireeye.com broken-link
- blogs.adobe.com broken-link vendor-advisory
- blogs.mcafee.com broken-link
- openSUSE-SU-2013:0335 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2013:0342 mailing-list third-party-advisory vendor-advisory
- SUSE-SU-2013:0349 mailing-list third-party-advisory vendor-advisory
- RHSA-2013:0551 third-party-advisory vendor-advisory
- GLSA-201308-03 third-party-advisory vendor-advisory
- www.adobe.com vendor-advisory
- www.adobe.com broken-link
- VU#422807 third-party-advisory us-government-resource
- oval:org.mitre.oval:def:16296 broken-link signature vdb-entry
- www.cisa.gov government-resource us-government-resource