Vulnerability Description
Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Acrobat | >= 9.0, < 9.5.4 |
| Adobe | Acrobat Reader | >= 10.0, < 10.1.6 |
| Apple | Mac Os X | - |
| Microsoft | Windows | - |
| Opensuse | Opensuse | 11.4 |
| Suse | Linux Enterprise Desktop | 10 |
| Redhat | Enterprise Linux Desktop | 6.0 |
| Redhat | Enterprise Linux Eus | 5.9 |
| Redhat | Enterprise Linux Server | 6.0 |
| Redhat | Enterprise Linux Server Aus | 5.9 |
| Redhat | Enterprise Linux Workstation | 6.0 |
| Linux | Linux Kernel | - |
Related Weaknesses (CWE)
References
- http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.htmlBroken Link
- http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-repoBroken Link
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.htmlMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0551.htmlThird Party Advisory
- http://security.gentoo.org/glsa/glsa-201308-03.xmlThird Party Advisory
- http://www.adobe.com/support/security/advisories/apsa13-02.htmlVendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb13-07.htmlBroken Link
- http://www.kb.cert.org/vuls/id/422807Third Party AdvisoryUS Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Broken Link
- http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.htmlBroken Link
- http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-repoBroken Link
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.htmlMailing ListThird Party Advisory
FAQ
What is CVE-2013-0640?
CVE-2013-0640 is a vulnerability with a CVSS score of 7.8 (HIGH). Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted P...
How severe is CVE-2013-0640?
CVE-2013-0640 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-0640?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Acrobat, Adobe Acrobat Reader, Apple Mac Os X, Microsoft Windows, Opensuse Opensuse.