Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-0640
HistoryFeb 14, 2013 - 1:55 a.m.

CVE-2013-0640

2013-02-1401:55:02
[email protected]
web.nvd.nist.gov
967
In Wild
adobe
reader
acrobat
vulnerability
pdf
remote code execution
memory corruption
nvd
cve-2013-0640

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.949 High

EPSS

Percentile

99.3%

JSON

Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

Affected configurations

NVD
Node
adobeacrobat_readerMatch9.0
OR
adobeacrobat_readerMatch9.1
OR
adobeacrobat_readerMatch9.1.1
OR
adobeacrobat_readerMatch9.1.2
OR
adobeacrobat_readerMatch9.1.3
OR
adobeacrobat_readerMatch9.2
OR
adobeacrobat_readerMatch9.3
OR
adobeacrobat_readerMatch9.3.1
OR
adobeacrobat_readerMatch9.3.2
OR
adobeacrobat_readerMatch9.3.3
OR
adobeacrobat_readerMatch9.3.4
OR
adobeacrobat_readerMatch9.4
OR
adobeacrobat_readerMatch9.4.1
OR
adobeacrobat_readerMatch9.4.2
OR
adobeacrobat_readerMatch9.4.3
OR
adobeacrobat_readerMatch9.4.4
OR
adobeacrobat_readerMatch9.4.5
OR
adobeacrobat_readerMatch9.4.6
OR
adobeacrobat_readerMatch9.4.7
OR
adobeacrobat_readerMatch9.5
OR
adobeacrobat_readerMatch9.5.1
OR
adobeacrobat_readerMatch9.5.2
OR
adobeacrobat_readerMatch9.5.3
Node
adobeacrobat_readerMatch10.0
OR
adobeacrobat_readerMatch10.0.1
OR
adobeacrobat_readerMatch10.0.2
OR
adobeacrobat_readerMatch10.0.3
OR
adobeacrobat_readerMatch10.1
OR
adobeacrobat_readerMatch10.1.1
OR
adobeacrobat_readerMatch10.1.2
OR
adobeacrobat_readerMatch10.1.3
OR
adobeacrobat_readerMatch10.1.4
OR
adobeacrobat_readerMatch10.1.5
Node
adobeacrobat_readerMatch11.0
OR
adobeacrobat_readerMatch11.0.1
Node
adobeacrobatMatch9.0
OR
adobeacrobatMatch9.0-pro
OR
adobeacrobatMatch9.1
OR
adobeacrobatMatch9.1-pro
OR
adobeacrobatMatch9.1.1
OR
adobeacrobatMatch9.1.1-
OR
adobeacrobatMatch9.1.2
OR
adobeacrobatMatch9.1.3
OR
adobeacrobatMatch9.1.3-
OR
adobeacrobatMatch9.2
OR
adobeacrobatMatch9.2-
OR
adobeacrobatMatch9.3
OR
adobeacrobatMatch9.3-pro
OR
adobeacrobatMatch9.3.1
OR
adobeacrobatMatch9.3.1-
OR
adobeacrobatMatch9.3.2
OR
adobeacrobatMatch9.3.2-
OR
adobeacrobatMatch9.3.3
OR
adobeacrobatMatch9.3.4
OR
adobeacrobatMatch9.3.4-
OR
adobeacrobatMatch9.4
OR
adobeacrobatMatch9.4.1
OR
adobeacrobatMatch9.4.1-
OR
adobeacrobatMatch9.4.2
OR
adobeacrobatMatch9.4.2-
OR
adobeacrobatMatch9.4.3
OR
adobeacrobatMatch9.4.3-
OR
adobeacrobatMatch9.4.4
OR
adobeacrobatMatch9.4.4-
OR
adobeacrobatMatch9.4.5
OR
adobeacrobatMatch9.4.5-
OR
adobeacrobatMatch9.4.6
OR
adobeacrobatMatch9.4.6-
OR
adobeacrobatMatch9.4.7
OR
adobeacrobatMatch9.5
OR
adobeacrobatMatch9.5.1
OR
adobeacrobatMatch9.5.2
OR
adobeacrobatMatch9.5.3
Node
adobeacrobatMatch10.0
OR
adobeacrobatMatch10.0-pro
OR
adobeacrobatMatch10.0.1
OR
adobeacrobatMatch10.0.1-pro
OR
adobeacrobatMatch10.0.2
OR
adobeacrobatMatch10.0.3
OR
adobeacrobatMatch10.1
OR
adobeacrobatMatch10.1.1
OR
adobeacrobatMatch10.1.2
OR
adobeacrobatMatch10.1.3
OR
adobeacrobatMatch10.1.4
OR
adobeacrobatMatch10.1.5
Node
adobeacrobatMatch11.0
OR
adobeacrobatMatch11.0.1

Related

canvas 1
ubuntucve 1
cvelist 1
seebug 1
exploitpack 1
checkpoint_advisories 2
attackerkb 1
nvd 1
symantec 1
threatpost 5
cisa_kev 1
prion 1
thn 5
exploitdb 1
redhat 1
nessus 10
openvas 12
securityvulns 1
carbonblack 1
cert 1
suse 4
cisa 1
gentoo 1
canvas
canvas
Immunity Canvas: ACROBAT_XFA
2013-02-14 01:55:00
ubuntucve
ubuntucve
CVE-2013-0640
2013-02-14 00:00:00
cvelist
cvelist
CVE-2013-0640
2013-02-14 01:00:00
seebug
seebug
Adobe Acrobat Reader - ASLR/DEP Bypass Exploit with SANDBOX BYPASS
2014-07-01 00:00:00
exploitpack
exploitpack
Adobe Acrobat Reader - ASLR + DEP Bypass with Sandbox Bypass
2013-11-28 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Reader XFA Remote Code Execution - Ver2 (CVE-2013-0640)
2014-03-31 00:00:00
Adobe Reader PDF File DLL Injection Remote Code Execution (APSA13-02; CVE-2013-0640)
2013-02-17 00:00:00
attackerkb
attackerkb
CVE-2013-0640
2013-02-14 00:00:00
nvd
nvd
CVE-2013-0640
2013-02-14 01:55:02
symantec
symantec
Adobe Acrobat And Reader CVE-2013-0640 Remote Code Execution Vulnerability
2013-02-12 00:00:00
threatpost
threatpost
New Attacks Leverage Adobe Sandbox Bypass Against Uyghur Activists
2013-03-14 16:06:31
MiniDuke Espionage Malware Hits Governments in Europe Using Adobe Exploits
2013-02-27 17:17:22
Adobe Patches Sandbox Escape Vulnerability in Reader and Acrobat
2013-02-20 18:32:27
cisa_kev
cisa_kev
Adobe Reader and Acrobat Memory Corruption Vulnerability
2022-03-03 00:00:00
prion
prion
Memory corruption
2013-02-14 01:55:00
thn
thn
MiniDuke Malware spreads via Fake Ukraine-related Documents
2014-04-01 23:00:00
Patch released for critical Adobe vulnerabilities
2013-02-20 12:14:00
Patch released for critical Adobe vulnerabilities
2013-02-20 23:14:00
exploitdb
exploitdb
Adobe Acrobat Reader - ASLR + DEP Bypass with Sandbox Bypass
2013-11-28 00:00:00
redhat
redhat
(RHSA-2013:0551) Critical: acroread security update
2013-02-21 00:00:00
nessus
nessus
SuSE 10 Security Update : acroread (ZYPP Patch Number 8474)
2013-02-27 00:00:00
Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSA13-02, APSB13-07) (Mac OS X)
2013-02-21 00:00:00
Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)
2013-02-21 00:00:00
openvas
openvas
SuSE Update for acroread openSUSE-SU-2013:0335-1 (acroread)
2013-03-11 00:00:00
Adobe Acrobat Multiple Unspecified Vulnerabilities -01 Feb13 (Mac OS X)
2013-02-19 00:00:00
Adobe Reader Multiple Unspecified Vulnerabilities -01 (Feb 2013) - Windows
2013-02-19 00:00:00
securityvulns
securityvulns
Adobe Reader / Acrobat security vulnerabilities
2013-03-03 00:00:00
carbonblack
carbonblack
The Dukes of Moscow
2020-03-26 18:41:05
cert
cert
Adobe Reader and Acrobat memory corruption vulnerabilities
2013-02-14 00:00:00
suse
suse
acroread to 9.5.4 (critical)
2013-02-25 16:04:25
acroread to 9.5.4 (critical)
2013-02-28 18:26:32
Security update for acroread (important)
2013-02-26 18:06:14
cisa
cisa
Adobe Releases Security Updates for Adobe Reader and Acrobat
2013-02-14 00:00:00
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2013-08-22 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.949 High

EPSS

Percentile

99.3%

JSON
Related for CVE-2013-0640
canvas1ubuntucve1cvelist1seebug1exploitpack1checkpoint_advisories2attackerkb1nvd1symantec1threatpost5cisa_kev1prion1thn5exploitdb1redhat1nessus10openvas12securityvulns1carbonblack1cert1suse4cisa1gentoo1