The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

🗓️ 06 Jul 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Adobe Reader and Acrobat have a memory buffer overrun that allows code execution or service disruption via a crafted bitmap file.

Reporter	Title	Published	Views	Family All 61
0day.today	Adobe Reader ToolButton Use After Free	17 Dec 201300:00	–	zdt
canvas	Immunity Canvas: ACROBAT_TOOLBUTTON	30 Aug 201320:55	–	canvas
Tenable Nessus	Adobe Acrobat < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15)	14 May 201300:00	–	nessus
Tenable Nessus	Adobe Reader < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15)	14 May 201300:00	–	nessus
Tenable Nessus	GLSA-201309-10 : Adobe Reader: Arbitrary Code Execution	15 Sep 201300:00	–	nessus
Tenable Nessus	Adobe Reader < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15) (Mac OS X)	14 May 201300:00	–	nessus
Tenable Nessus	RHEL 5 / 6 : acroread (RHSA-2013:0826)	16 May 201300:00	–	nessus
ATTACKERKB	CVE-2013-3346	30 Aug 201300:00	–	attackerkb
Circl	CVE-2013-3346	17 Dec 201300:00	–	circl
CISA KEV Catalog	Adobe Reader and Acrobat Memory Corruption Vulnerability	3 Mar 202200:00	–	cisa_kev

Vulners

Node

adobe_systems adobe_readerRange9.0–9.5.5

OR

adobe_systems adobe_readerRange10.0–10.1.7

OR

adobe_systems adobe_readerRange11.0–11.0.03

OR

adobe_systems adobe_acrobatRange11.0–11.0.03

OR

adobe_systems adobe_acrobatRange10.0–10.1.7

OR

adobe_systems adobe_acrobatRange9.0–9.5.5

Source	Link
adobe	www.adobe.com/support/security/bulletins/apsb13-15.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19054
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-3346
vuldb	www.vuldb.com/ru/
exploit-db	www.exploit-db.com/exploits/26703
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 38.8

CVSS 210

EPSS0.89557

adobe reader acrobats?memory overrun arbitrary code service disruption bitmap file