Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-0640
HistoryFeb 14, 2013 - 1:55 a.m.

CVE-2013-0640

2013-02-1401:55:02
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.949 High

EPSS

Percentile

99.3%

JSON

Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

Affected configurations

NVD
Node
adobeacrobat_readerMatch9.0
OR
adobeacrobat_readerMatch9.1
OR
adobeacrobat_readerMatch9.1.1
OR
adobeacrobat_readerMatch9.1.2
OR
adobeacrobat_readerMatch9.1.3
OR
adobeacrobat_readerMatch9.2
OR
adobeacrobat_readerMatch9.3
OR
adobeacrobat_readerMatch9.3.1
OR
adobeacrobat_readerMatch9.3.2
OR
adobeacrobat_readerMatch9.3.3
OR
adobeacrobat_readerMatch9.3.4
OR
adobeacrobat_readerMatch9.4
OR
adobeacrobat_readerMatch9.4.1
OR
adobeacrobat_readerMatch9.4.2
OR
adobeacrobat_readerMatch9.4.3
OR
adobeacrobat_readerMatch9.4.4
OR
adobeacrobat_readerMatch9.4.5
OR
adobeacrobat_readerMatch9.4.6
OR
adobeacrobat_readerMatch9.4.7
OR
adobeacrobat_readerMatch9.5
OR
adobeacrobat_readerMatch9.5.1
OR
adobeacrobat_readerMatch9.5.2
OR
adobeacrobat_readerMatch9.5.3
Node
adobeacrobat_readerMatch10.0
OR
adobeacrobat_readerMatch10.0.1
OR
adobeacrobat_readerMatch10.0.2
OR
adobeacrobat_readerMatch10.0.3
OR
adobeacrobat_readerMatch10.1
OR
adobeacrobat_readerMatch10.1.1
OR
adobeacrobat_readerMatch10.1.2
OR
adobeacrobat_readerMatch10.1.3
OR
adobeacrobat_readerMatch10.1.4
OR
adobeacrobat_readerMatch10.1.5
Node
adobeacrobat_readerMatch11.0
OR
adobeacrobat_readerMatch11.0.1
Node
adobeacrobatMatch9.0
OR
adobeacrobatMatch9.0-pro
OR
adobeacrobatMatch9.1
OR
adobeacrobatMatch9.1-pro
OR
adobeacrobatMatch9.1.1
OR
adobeacrobatMatch9.1.1-
OR
adobeacrobatMatch9.1.2
OR
adobeacrobatMatch9.1.3
OR
adobeacrobatMatch9.1.3-
OR
adobeacrobatMatch9.2
OR
adobeacrobatMatch9.2-
OR
adobeacrobatMatch9.3
OR
adobeacrobatMatch9.3-pro
OR
adobeacrobatMatch9.3.1
OR
adobeacrobatMatch9.3.1-
OR
adobeacrobatMatch9.3.2
OR
adobeacrobatMatch9.3.2-
OR
adobeacrobatMatch9.3.3
OR
adobeacrobatMatch9.3.4
OR
adobeacrobatMatch9.3.4-
OR
adobeacrobatMatch9.4
OR
adobeacrobatMatch9.4.1
OR
adobeacrobatMatch9.4.1-
OR
adobeacrobatMatch9.4.2
OR
adobeacrobatMatch9.4.2-
OR
adobeacrobatMatch9.4.3
OR
adobeacrobatMatch9.4.3-
OR
adobeacrobatMatch9.4.4
OR
adobeacrobatMatch9.4.4-
OR
adobeacrobatMatch9.4.5
OR
adobeacrobatMatch9.4.5-
OR
adobeacrobatMatch9.4.6
OR
adobeacrobatMatch9.4.6-
OR
adobeacrobatMatch9.4.7
OR
adobeacrobatMatch9.5
OR
adobeacrobatMatch9.5.1
OR
adobeacrobatMatch9.5.2
OR
adobeacrobatMatch9.5.3
Node
adobeacrobatMatch10.0
OR
adobeacrobatMatch10.0-pro
OR
adobeacrobatMatch10.0.1
OR
adobeacrobatMatch10.0.1-pro
OR
adobeacrobatMatch10.0.2
OR
adobeacrobatMatch10.0.3
OR
adobeacrobatMatch10.1
OR
adobeacrobatMatch10.1.1
OR
adobeacrobatMatch10.1.2
OR
adobeacrobatMatch10.1.3
OR
adobeacrobatMatch10.1.4
OR
adobeacrobatMatch10.1.5
Node
adobeacrobatMatch11.0
OR
adobeacrobatMatch11.0.1

Related

exploitpack 1
checkpoint_advisories 2
attackerkb 1
cve 1
canvas 1
ubuntucve 1
cvelist 1
seebug 1
symantec 1
threatpost 5
cisa_kev 1
prion 1
thn 5
exploitdb 1
securityvulns 1
nessus 10
openvas 12
carbonblack 1
redhat 1
cert 1
suse 4
cisa 1
gentoo 1
exploitpack
exploitpack
Adobe Acrobat Reader - ASLR + DEP Bypass with Sandbox Bypass
2013-11-28 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Reader XFA Remote Code Execution - Ver2 (CVE-2013-0640)
2014-03-31 00:00:00
Adobe Reader PDF File DLL Injection Remote Code Execution (APSA13-02; CVE-2013-0640)
2013-02-17 00:00:00
attackerkb
attackerkb
CVE-2013-0640
2013-02-14 00:00:00
cve
cve
CVE-2013-0640
2013-02-14 01:55:02
canvas
canvas
Immunity Canvas: ACROBAT_XFA
2013-02-14 01:55:00
ubuntucve
ubuntucve
CVE-2013-0640
2013-02-14 00:00:00
cvelist
cvelist
CVE-2013-0640
2013-02-14 01:00:00
seebug
seebug
Adobe Acrobat Reader - ASLR/DEP Bypass Exploit with SANDBOX BYPASS
2014-07-01 00:00:00
symantec
symantec
Adobe Acrobat And Reader CVE-2013-0640 Remote Code Execution Vulnerability
2013-02-12 00:00:00
threatpost
threatpost
New Attacks Leverage Adobe Sandbox Bypass Against Uyghur Activists
2013-03-14 16:06:31
MiniDuke Espionage Malware Hits Governments in Europe Using Adobe Exploits
2013-02-27 17:17:22
Adobe Patches Sandbox Escape Vulnerability in Reader and Acrobat
2013-02-20 18:32:27
cisa_kev
cisa_kev
Adobe Reader and Acrobat Memory Corruption Vulnerability
2022-03-03 00:00:00
prion
prion
Memory corruption
2013-02-14 01:55:00
thn
thn
MiniDuke Malware spreads via Fake Ukraine-related Documents
2014-04-01 23:00:00
Patch released for critical Adobe vulnerabilities
2013-02-20 12:14:00
Patch released for critical Adobe vulnerabilities
2013-02-20 23:14:00
exploitdb
exploitdb
Adobe Acrobat Reader - ASLR + DEP Bypass with Sandbox Bypass
2013-11-28 00:00:00
securityvulns
securityvulns
Adobe Reader / Acrobat security vulnerabilities
2013-03-03 00:00:00
nessus
nessus
RHEL 5 / 6 : acroread (RHSA-2013:0551)
2013-02-22 00:00:00
Adobe Reader <= 11.0.1 / 10.1.5 / 9.5.3 Multiple Vulnerabilities (APSA13-02)
2013-02-15 00:00:00
Adobe Acrobat <= 11.0.1 / 10.1.5 / 9.5.3 Multiple Vulnerabilities (APSA13-02)
2013-02-15 00:00:00
openvas
openvas
Adobe Acrobat Multiple Unspecified Vulnerabilities -01 (Feb 2013) - Windows
2013-02-19 00:00:00
Adobe Reader Multiple Unspecified Vulnerabilities -01 (Feb 2013) - Mac OS X
2013-02-19 00:00:00
Adobe Reader Multiple Unspecified Vulnerabilities -01 (Feb 2013) - Linux
2013-02-19 00:00:00
carbonblack
carbonblack
The Dukes of Moscow
2020-03-26 18:41:05
redhat
redhat
(RHSA-2013:0551) Critical: acroread security update
2013-02-21 00:00:00
cert
cert
Adobe Reader and Acrobat memory corruption vulnerabilities
2013-02-14 00:00:00
suse
suse
acroread to 9.5.4 (critical)
2013-02-25 16:04:25
acroread to 9.5.4 (critical)
2013-02-28 18:26:32
Security update for acroread (important)
2013-02-26 18:06:14
cisa
cisa
Adobe Releases Security Updates for Adobe Reader and Acrobat
2013-02-14 00:00:00
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2013-08-22 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.949 High

EPSS

Percentile

99.3%

JSON
Related for NVD:CVE-2013-0640
exploitpack1checkpoint_advisories2attackerkb1cve1canvas1ubuntucve1cvelist1seebug1symantec1threatpost5cisa_kev1prion1thn5exploitdb1securityvulns1nessus10openvas12carbonblack1redhat1cert1suse4cisa1gentoo1