ByteOS Network

CVE Vulnerability Details :

CVE-2013-0641

PUBLISHED

More Info Official Page

Assigner-adobe

Assigner Org ID-078d4453-3bcd-4900-85e6-15281da43538

View Known Exploited Vulnerability (KEV) details

Published At-14 Feb, 2013 | 01:00

Updated At-22 Oct, 2025 | 00:05

▼CVE Numbering Authority (CNA)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html	x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/422807	third-party-advisory x_refsource_CERT-VN
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html	vendor-advisory x_refsource_SUSE
http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html	vendor-advisory x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2013-0551.html	vendor-advisory x_refsource_REDHAT
http://www.adobe.com/support/security/bulletins/apsb13-07.html	x_refsource_CONFIRM
http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html	vendor-advisory x_refsource_SUSE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296	vdb-entry signature x_refsource_OVAL
http://www.adobe.com/support/security/advisories/apsa13-02.html	x_refsource_CONFIRM
http://security.gentoo.org/glsa/glsa-201308-03.xml	vendor-advisory x_refsource_GENTOO

Hyperlink: http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.kb.cert.org/vuls/id/422807

Resource:

third-party-advisory

x_refsource_CERT-VN

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html

Resource:

x_refsource_MISC

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://rhn.redhat.com/errata/RHSA-2013-0551.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb13-07.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit

Resource:

x_refsource_MISC

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.adobe.com/support/security/advisories/apsa13-02.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://security.gentoo.org/glsa/glsa-201308-03.xml

Resource:

vendor-advisory

x_refsource_GENTOO

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html	x_refsource_CONFIRM x_transferred
http://www.kb.cert.org/vuls/id/422807	third-party-advisory x_refsource_CERT-VN x_transferred
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html	vendor-advisory x_refsource_SUSE x_transferred
http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html	x_refsource_MISC x_transferred
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html	vendor-advisory x_refsource_SUSE x_transferred
http://rhn.redhat.com/errata/RHSA-2013-0551.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.adobe.com/support/security/bulletins/apsb13-07.html	x_refsource_CONFIRM x_transferred
http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit	x_refsource_MISC x_transferred
http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html	vendor-advisory x_refsource_SUSE x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296	vdb-entry signature x_refsource_OVAL x_transferred
http://www.adobe.com/support/security/advisories/apsa13-02.html	x_refsource_CONFIRM x_transferred
http://security.gentoo.org/glsa/glsa-201308-03.xml	vendor-advisory x_refsource_GENTOO x_transferred

Hyperlink: http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.kb.cert.org/vuls/id/422807

Resource:

third-party-advisory

x_refsource_CERT-VN

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://rhn.redhat.com/errata/RHSA-2013-0551.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb13-07.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.adobe.com/support/security/advisories/apsa13-02.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201308-03.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-120	CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Type: CWE

CWE ID: CWE-120

Description: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Metrics

Version	Base score	Base severity	Vector
3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2022-03-03

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0641

Timeline

Event	Date
CVE-2013-0641 added to CISA KEV	2022-03-03 00:00:00

Event: CVE-2013-0641 added to CISA KEV

Date: 2022-03-03 00:00:00

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0641	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0641

Resource:

government-resource

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References