CVE-2013-2465

CVE-2013-2465 is a Java 2D component vulnerability that can cause memory corruption and potential sandbox bypass/remote code execution. It affected Oracle Java SE up to JRE 7u21, JDK 6 up to 6u45, and OpenJDK 7, with 2D-related vectors noted in public disclosures. Several advisories (Debian DSA-2...

CVE-2013-2463

CVE-2013-2463 affects the 2D component (ImagingLib) of Oracle/OpenJDK Java runtimes. Connected advisories describe memory corruption risks in ImagingLib.lookupByteBI and related 2D processing, potentially exploitable by untrusted Java applications/APIs. Affected packages include OpenJDK/OpenJDK-d...

CVE-2013-1331

CVE-2013-1331 is a buffer overflow in Microsoft Office 2003 SP3 and Office for Mac 2011 triggered when parsing PNG data embedded in an Office document, allowing remote attackers to execute arbitrary code. The vulnerability can be exploited through crafted PNG content, potentially via documents th...

CVE-2013-3660

CVE-2013-3660 describes a local privilege-escalation in Microsoft Windows via Win32k.sys (EPATHOBJ::pprFlattenRec) where a pointer for the next object in a PATHREC list is not properly initialized. According to the CVE description and linked documents, local users could gain write access to the P...

CVE-2013-2721

Technical details for CVE-2013-2721 are not publicly available in the provided documents. Please monitor vendor advisories and security bulletins for affected versions, impact, and remediation.

CVE-2013-2722

CVE-2013-3346 affects Adobe Reader and Acrobat, with memory corruption that could allow arbitrary code execution or cause a denial of service via unspecified vectors. The vulnerability is described as distinct from other CVEs in the same family, and is associated with the same affected product fa...

CVE-2013-2718

CVE-2013-3346 affects Adobe Reader and Acrobat: 9.x prior to 9.5.5, 10.x prior to 10.1.7, and 11.x prior to 11.0.03. It enables memory corruption leading to arbitrary code execution or a denial of service via unspecified vectors. Root cause is a memory corruption vulnerability distinct from CVE-2...

CVE-2013-3341

Adobe Reader and Acrobat are affected by CVE-2013-3341: multiple versions (9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03) permit memory-corruption-based exploits leading to arbitrary code execution or denial of service via unspecified vectors. The connected advisories indicate remedia...

CVE-2013-2725

Adobe Reader/Acrobat is affected by CVE-2013-3346 (and related CVEs) where versions 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 can be exploited to run arbitrary code or cause memory-corruption-based DoS via unspecified vectors. Root cause is memory corruption in the PDF renderi...

CVE-2013-2734

CVE-2013-3346 affects Adobe Reader and Acrobat (versions 9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03) and allows attackers to execute arbitrary code or cause a denial of service through memory corruption via unspecified vectors. The vulnerability is described as distinct from CVE-20...

CVE-2013-2736

CVE-2013-3346 affects Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03. The vulnerability allows attackers to execute arbitrary code or cause memory corruption via unspecified vectors, as a distinct issue from CVE-2013-2718/2719/2720/2721/2722/2723/2725/2726/...

CVE-2013-1675

CVE-2013-1675 affects Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, and Thunderbird before 17.0.6. The issue arises from improper initialization of nsDOMSVGZoomEvent data structures (mPreviousScale and mNewScale), enabling a remote attacker to disclose memory-resident data via a cr...

CVE-2013-2731

CVE-2013-2731 affects Adobe Reader/Acrobat on versions 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03. The connected advisories confirm memory-corruption/arbitrary-code and DoS risks via unspecified vectors, consistent with Adobe’s patch line. Affected products should update to the...

CVE-2013-2723

The CVE-2013-2723 entry affects Adobe Reader/Acrobat 9.x up to 9.5.4, 10.x up to 10.1.6, and 11.x up to 11.0.02, with memory-corruption based arbitrary-code/DoS impact via unspecified vectors. Connected advisories confirm multiple vulnerabilities in Adobe Reader, and remediation guidance from GLS...

CVE-2013-3337

Adobe Reader/Acrobat is affected by CVE-2013-3346: memory corruption leading to possible arbitrary code execution via unspecified vectors in versions 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03. The connected advisories (e.g., RHSA-2013:0826; GLSA-201308-03) indicate updating to...

CVE-2013-2719

CVE-2013-3346 affects Adobe Reader/Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03. Root cause: memory corruption via unspecified vectors; can lead to arbitrary code execution or Denial of Service. Remediation (per connected advisories): upgrade to Adobe Reader/Acrobat 9.5.5...

CVE-2013-2729

CVE-2013-2729 : Integer overflow in Adobe Reader/Acrobat BMP/RLE image handling can lead to arbitrary code execution. Affected: Adobe Reader/Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03. Root cause: heap/buffer overflow while parsing embedded BMP RLE resources in PDFs. Im...

CVE-2013-2727

CVE-2013-2727 affects Adobe Reader and Acrobat: an integer overflow in 9.x (before 9.5.5), 10.x (before 10.1.7), and 11.x (before 11.0.03) can allow arbitrary code execution via unspecified vectors. Root cause is an integer overflow in parsing input; impact is remote code execution. Remediation p...

CVE-2013-2720

CVE-2013-3346 affects Adobe Reader/Acrobat: versions 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03. The vulnerability enables memory corruption via unspecified vectors, potentially allowing arbitrary code execution or a denial of service. Root cause is memory corruption within com...

CVE-2013-3340

CVE-2013-3346 affects Adobe Reader/Acrobat 9.x (before 9.5.5), 10.x (before 10.1.7), and 11.x (before 11.0.03). The vulnerability is described as memory corruption that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors, and it is noted as a different ...