7.8Yüksek KEV

CVE-2013-0641Adobe Reader Buffer Overflow Vulnerability

adobe acrobat; adobe acrobat reader; redhat enterprise linux desktop; redhat enterprise linux eus Yayım: 2013-02-14 03:00 (13 yıl önce)

Aktif olarak istismar ediliyor — Adobe Reader Buffer Overflow Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 03.03.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 24.03.2022.

Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2013-0641

Açıklama

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

Zayıflık türü (CWE): CWE-120

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
adobe	acrobat	9.0 – < 9.5.4
adobe	acrobat reader	10.0 – < 10.1.6
opensuse	opensuse	11.4
redhat	enterprise linux desktop	6.0
redhat	enterprise linux eus	5.9
redhat	enterprise linux server	6.0
redhat	enterprise linux server aus	5.9
redhat	enterprise linux workstation	6.0
suse	linux enterprise desktop	10

Kaynaklar ve yamalar

http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html Broken LinkVendor Advisory
VU#422807 third-party-advisoryThird Party AdvisoryUS Government Resource
openSUSE-SU-2013:0335 vendor-advisoryMailing ListThird Party Advisory
http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html Broken Link
openSUSE-SU-2013:0342 vendor-advisoryMailing ListThird Party Advisory
RHSA-2013:0551 vendor-advisoryThird Party Advisory
http://www.adobe.com/support/security/bulletins/apsb13-07.html Broken Link
http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit Broken Link
SUSE-SU-2013:0349 vendor-advisoryMailing ListThird Party Advisory
oval:org.mitre.oval:def:16296 vdb-entrysignatureBroken Link
http://www.adobe.com/support/security/advisories/apsa13-02.html Vendor Advisory
GLSA-201308-03 vendor-advisoryThird Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0641 US Government Resource

CPE eşleşmeleri (NVD) (17)

cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* ≥ 9.0 < 9.5.4
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* ≥ 10.0 < 10.1.6
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* ≥ 11.0 < 11.0.02
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 10.0 < 10.1.6
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 11.0 < 11.0.02
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 9.0 < 9.5.4
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:5.9:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*

CVSS puanı

7.8Yüksek

Kaynak: CISA-ADP · CVSS 3.1

Saldırı yolu: Yerel
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekir
Kapsam: Değişmez
Gizlilik: Yüksek
Bütünlük: Yüksek
Erişilebilirlik: Yüksek

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tüm puanlar (4)

CISA-ADP	CVSS 3.1	7.8Yüksek
nvd	CVSS 3.1	7.8Yüksek
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	7.8Yüksek
nvd	CVSS 2.0	9.3Yüksek

EPSS (30 günde istismar olasılığı)

32.35%

tüm CVE'lerin %98'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: active
Otomatikleştirilebilir: no
Teknik etki: total

Zaman çizelgesi

Numara ayrıldı2012-12-18
Yayımlandı2013-02-14 03:00
IP-DB'ye ulaştı2026-10-24 23:34
KEV'e eklendi2022-03-03
Son güncelleme2026-06-17 02:49

Numarayı veren (CNA): adobe
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Adobe Acrobat / Reader

8.8Yüksek

CVE-2026-100134 16 gün önce

Acrobat for Edge | Out-of-bounds Write (CWE-787)

Adobe Acrobat for Edge

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

4.3Orta

CVE-2026-100132 16 gün önce

Acrobat for Edge | Out-of-bounds Read (CWE-125)

Adobe Acrobat for Edge

Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in tha…

5.5Orta

CVE-2026-81984 1 ay önce

Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a vic…

7.8Yüksek

CVE-2026-81989 1 ay önce

Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

5.5Orta

CVE-2026-81991 1 ay önce

Acrobat Reader | Out-of-bounds Read (CWE-125)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that …

7.8Yüksek

CVE-2026-81980 1 ay önce

Acrobat Reader | Out-of-bounds Write (CWE-787)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.