Lucene search

[email protected]CVE-2013-5325

HistoryOct 09, 2013 - 2:54 p.m.

CVE-2013-5325

2013-10-0914:54:26

CWE-94

[email protected]

web.nvd.nist.gov

106

adobe

reader

acrobat

cve-2013-5325

security

vulnerability

javascript

pdf

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.9%

JSON

Adobe Reader and Acrobat 11.x before 11.0.05 on Windows allow remote attackers to execute arbitrary JavaScript code in a javascript: URL via a crafted PDF document.

Affected configurations

NVD

Node

adobeacrobatMatch11.0

adobeacrobatMatch11.0.1

adobeacrobatMatch11.0.2

adobeacrobatMatch11.0.3

adobeacrobatMatch11.0.4

adobeacrobat_readerMatch11.0

adobeacrobat_readerMatch11.0.1

adobeacrobat_readerMatch11.0.2

adobeacrobat_readerMatch11.0.3

adobeacrobat_readerMatch11.0.4

AND

microsoftwindows

CPENameOperatorVersion
adobe:acrobatadobe acrobateq11.0
adobe:acrobatadobe acrobateq11.0.1
adobe:acrobatadobe acrobateq11.0.2
adobe:acrobatadobe acrobateq11.0.3
adobe:acrobatadobe acrobateq11.0.4
adobe:acrobat_readeradobe acrobat readereq11.0
adobe:acrobat_readeradobe acrobat readereq11.0.1
adobe:acrobat_readeradobe acrobat readereq11.0.2
adobe:acrobat_readeradobe acrobat readereq11.0.3
adobe:acrobat_readeradobe acrobat readereq11.0.4

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	eq	11.0
adobe:acrobat	adobe acrobat	eq	11.0.1
adobe:acrobat	adobe acrobat	eq	11.0.2
adobe:acrobat	adobe acrobat	eq	11.0.3
adobe:acrobat	adobe acrobat	eq	11.0.4
adobe:acrobat_reader	adobe acrobat reader	eq	11.0
adobe:acrobat_reader	adobe acrobat reader	eq	11.0.1
adobe:acrobat_reader	adobe acrobat reader	eq	11.0.2
adobe:acrobat_reader	adobe acrobat reader	eq	11.0.3
adobe:acrobat_reader	adobe acrobat reader	eq	11.0.4