CVE-2013-3339

CVE-2013-3339 affects Adobe Reader and Acrobat: 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03, enabling arbitrary code execution or memory corruption via unspecified vectors. Connected advisories indicate a vendor patch exists (e.g., RHSA-2013:0826; openSUSE openSUSE-2013:0990) an...

CVE-2013-3340

CVE-2013-3346 affects Adobe Reader/Acrobat 9.x (before 9.5.5), 10.x (before 10.1.7), and 11.x (before 11.0.03). The vulnerability is described as memory corruption that allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors, and it is noted as a different ...

CVE-2013-2735

Adobe Reader/Acrobat in vulnerable branches (9.x prior to 9.5.5, 10.x prior to 10.1.7, 11.x prior to 11.0.03) is affected by CVE-2013-2735 through memory corruption that can lead to arbitrary code execution or a denial of service. The issue is described as a memory corruption in unspecified vecto...

CVE-2013-2726

CVE-2013-3346 affects Adobe Reader/Acrobat 9.x prior to 9.5.5, 10.x prior to 10.1.7, and 11.x prior to 11.0.03. The connected advisories identify a memory corruption vulnerability that allows an attacker to execute arbitrary code or cause a denial of service via unspecified vectors. The root caus...

CVE-2013-2732

CVE-2013-2732 affects Adobe Reader and Acrobat across 9.x (before 9.5.5), 10.x (before 10.1.7), and 11.x (before 11.0.03). Root cause: memory corruption via unspecified vectors allowing arbitrary code execution or DoS. Impact is consistent with the description (arbitrary code execution or denial ...

CVE-2013-1308

Technical details for CVE-2013-1308 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability catalogs.

CVE-2013-1309

CVE-2013-1309 corresponds to the Internet Explorer Use-After-Free vulnerability (MS13-037) affecting IE 6–10. The issue arises from use-after-free in memory handling (notably related to CDispNode/vgx.dll) when processing certain web content, enabling remote code execution via a crafted site. Publ...

CVE-2013-2094

CVE-2013-2094 affects the Linux kernel: the perf_swevent_init code in kernel/events/core.c uses an incorrect integer type, enabling a local, unprivileged user to escalate privileges via a crafted perf_event_open call. The issue leads to out-of-bounds access of perf_swevent_enabled and has been fi...

CVE-2013-1347

CVE-2013-1347 (Internet Explorer 8) is a remote code execution vulnerability in IE8 arising from a use-after-free in CGenericElement/mshtml.dll when handling in-memory objects. Exploitation in the wild during 2013 (notably DoL incident) demonstrated remote code execution by visiting a crafted web...

CVE-2013-2423

CVE-2013-2423 is an unspecified remote vulnerability in the Java Runtime Environment (JRE) component affecting Oracle Java SE 7 (Update 17 and earlier) and OpenJDK 7. The root cause, as per connected advisories, involves hotspot-related code and unknown vectors allowing reflection/type-confusion ...

CVE-2013-3051

The CVE-2013-3051 issue concerns the TrustZone kernel on certain Motorola builds of Android 4.1.2 (Razr HD, Razr M, Atrix HD with Qualcomm MSM8960). The vulnerability arises because the kernel does not verify the association between a specific physical-address argument and a memory region, enabli...

CVE-2013-2596

CVE-2013-2596 is an integer overflow in the Linux kernel’s fb_mmap implementation (fbmem.c) up to version 3.8.9. It enables a local user to map kernel memory via /dev/graphics/fb0 mmap2, gaining privileges (Motochopper demonstration). Connected advisories (e.g., CentOS RHSA-2016:0450, F5 SOL11353...

CVE-2013-0322

CVE-2013-0322 affects the Drupal Ubercart module (7.x-3.x) prior to 7.x-3.4, with the XSS vulnerability arising in the Views integration when processing the full name field. The root cause is unsanitized output in the full name field, allowing remote attackers to inject arbitrary script/HTML. Pub...

CVE-2013-0074

CVE-2013-0074 (Microsoft Silverlight) affects Silverlight 5 and the 5 Developer Runtime prior to 5.1.20125.0. The root cause is improper validation of pointers during HTML object rendering, leading to a pointer-dereference memory corruption that can allow remote code execution via a crafted Silve...

CVE-2013-2551

CVE-2013-2551 is a use-after-free vulnerability in Microsoft Internet Explorer (IE 6–10) that allows remote code execution when a crafted web page triggers access to a deleted object. The issue is documented as an internet-explorer use-after-free vulnerability exploited via drive-by pages (notabl...

CVE-2013-0643

CVE-2013-0643: Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows remote code execution via crafted SWF content. Affected products include Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows/macOS, and before 10.3.183....

CVE-2013-0648

Adobe Flash Player contains a code execution vulnerability in the ExternalInterface ActionScript pathway. Affected versions include Windows/Mac builds prior to 10.3.183.67 and 11.x prior to 11.6.602.171, and Linux builds prior to 10.3.183.67 and 11.x prior to 11.2.202.273. Exploitation could occu...

CVE-2013-0640

CVE-2013-0640 is a memory corruption remote code execution vulnerability in Adobe Reader and Acrobat. It affects Adobe Reader/Acrobat 9.x prior to 9.5.4, 10.x prior to 10.1.6, and 11.x prior to 11.0.02, exploitable via a crafted PDF and observed in the wild in February 2013. The impact includes r...

CVE-2013-0641

CVE-2013-0641 is a buffer overflow in Adobe Reader and Acrobat versions prior to certain patches that allows a remote attacker to execute arbitrary code via a crafted PDF. The description specifies impact as remote code execution, with exploitation observed in the wild in February 2013. Affected ...

CVE-2012-0874

CVE-2012-0874 affects JBoss family products (EAP, EWP, BRMS Platform, SOA Platform) prior to version 5.2.x / 5.3.x where JMXInvokerHAServlet and EJBInvokerHAServlet did not require authentication by default in certain profiles. This can allow a remote attacker to invoke MBean methods and, as note...