ID CVE-2013-0113 Type cve Reporter NVD Modified 2013-02-26T00:00:00
Description
Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document.
{"title": "CVE-2013-0113", "reporter": "NVD", "enchantments": {"vulnersScore": 9.3}, "published": "2013-02-24T06:48:21", "cvelist": ["CVE-2013-0113"], "hash": "ea638535e1faf86e82448f0e7cec5947671a1d303ad0d55faef59066b669a3a9", "objectVersion": "1.2", "type": "cve", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0113", "bulletinFamily": "NVD", "id": "CVE-2013-0113", "history": [], "scanner": [], "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "modified": "2013-02-26T00:00:00", "viewCount": 0, "cpe": ["cpe:/a:nuance:pdf_reader:7.0", "cpe:/a:nuance:pdf_reader_plus:7.1"], "edition": 1, "description": "Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document.", "references": ["http://www.kb.cert.org/vuls/id/248449"], "lastseen": "2016-09-03T17:49:42", "assessment": {"system": "", "name": "", "href": ""}}
{"result": {"cert": [{"id": "VU:248449", "type": "cert", "title": "Nuance PDF viewing products contain multiple vulnerabilities", "description": "### Overview\n\nNuance PDF viewing products contain multiple memory-corruption vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.\n\n### Description\n\nNuance provides two similar PDF viewing products called PDF Reader and PDF Viewer Plus. Both of these products contain multiple exploitable memory-corruption vulnerabilities. We have found that both Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 are affected. \n \n--- \n \n### Impact\n\nBy convincing a user to view a specially crafted PDF document, an attacker may be able to execute arbitrary code on a vulnerable system. \n \n--- \n \n### Solution\n\nWe are currently unaware of a practical solution to this problem. Please consider the following workarounds: \n \n--- \n \n**Use the Microsoft Enhanced Mitigation Experience Toolkit**\n\nThe [Microsoft Enhanced Mitigation Experience Toolkit](<http://support.microsoft.com/kb/2458544>) (EMET) can be used to help prevent exploitation of this vulnerability. CERT/CC has created a [video tutorial for setting up EMET 3.0](<http://www.youtube.com/watch?v=28_LUs_g0u4>) on Windows 7. Note that platforms that do not support ASLR, such as Windows XP and Windows Server 2003, will not receive the same level of protection that modern Windows platforms will. \n \n**Enable DEP in Microsoft Windows** \n \nConsider enabling Data Execution Prevention (DEP) in supported versions of Windows. DEP should not be treated as a complete workaround, but it can mitigate the execution of attacker-supplied code in some cases. Microsoft has published detailed technical information about DEP in Security Research & Defense blog posts \"Understanding DEP as a mitigation technology\" [part 1](<http://blogs.technet.com/srd/archive/2009/06/05/understanding-dep-as-a-mitigation-technology-part-1.aspx>) and [part 2](<http://blogs.technet.com/srd/archive/2009/06/12/understanding-dep-as-a-mitigation-technology-part-2.aspx>). DEP should be used in conjunction with the application of patches or other mitigations described in this document. \n \nNote that when relying on DEP for exploit mitigation, it is important to use a system that supports Address Space Layout Randomization (ASLR) as well. ASLR is not supported by Windows XP or Windows Server 2003 or earlier. ASLR was introduced with Microsoft Windows Vista and Windows Server 2008. Please see the Microsoft SRD blog entry: [On the effectiveness of DEP and ASLR](<http://blogs.technet.com/b/srd/archive/2010/12/08/on-the-effectiveness-of-dep-and-aslr.aspx>) for more details. \n \n--- \n \n### Vendor Information \n\nVendor| Status| Date Notified| Date Updated \n---|---|---|--- \nNuance Communications, Inc.| | 17 Dec 2012| 05 Feb 2013 \nIf you are a vendor and your product is affected, [let us know](<mailto:cert@cert.org?Subject=VU%23248449 Vendor Status Inquiry>).\n\n### CVSS Metrics \n\nGroup | Score | Vector \n---|---|--- \nBase | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C \nTemporal | 9.0 | E:POC/RL:U/RC:C \nEnvironmental | 2.3 | CDP:ND/TD:L/CR:ND/IR:ND/AR:ND \n \n### References\n\n * <http://www.nuance.com/products/pdf-reader/index.htm>\n * <http://support.microsoft.com/kb/2458544>\n * <http://blogs.technet.com/srd/archive/2009/06/05/understanding-dep-as-a-mitigation-technology-part-1.aspx>\n * <http://blogs.technet.com/srd/archive/2009/06/12/understanding-dep-as-a-mitigation-technology-part-2.aspx>\n * <http://blogs.technet.com/b/srd/archive/2010/12/08/on-the-effectiveness-of-dep-and-aslr.aspx>\n\n### Credit\n\nThese vulnerabilities were reported by Will Dormann of the CERT/CC.\n\nThis document was written by Will Dormann.\n\n### Other Information\n\n * CVE IDs: [CVE-2013-0113](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-0113>)\n * Date Public: 07 Feb 2013\n * Date First Published: 07 Feb 2013\n * Date Last Updated: 07 Feb 2013\n * Document Revision: 11\n\n", "published": "2013-02-07T00:00:00", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.kb.cert.org/vuls/id/248449", "cvelist": ["CVE-2013-0113", "CVE-2013-0113"], "lastseen": "2016-02-03T09:13:33"}], "openvas": [{"id": "OPENVAS:803329", "type": "openvas", "title": "Nuance PDF Reader Multiple Memory Corruption Vulnerabilities", "description": "The host is installed with Nuance PDF Reader and is prone to\nmultiple memory-corruption vulnerabilities.", "published": "2013-03-11T00:00:00", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=803329", "cvelist": ["CVE-2013-0113"], "lastseen": "2017-07-02T21:11:23"}, {"id": "OPENVAS:1361412562310803329", "type": "openvas", "title": "Nuance PDF Reader Multiple Memory Corruption Vulnerabilities", "description": "The host is installed with Nuance PDF Reader and is prone to\nmultiple memory-corruption vulnerabilities.", "published": "2013-03-11T00:00:00", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310803329", "cvelist": ["CVE-2013-0113"], "lastseen": "2018-04-06T11:23:43"}]}}
