10

CVE-2013-3346

Warning

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.

Data is provided by the National Vulnerability Database (NVD)
Adobe ≫ Acrobat Version >= 9.0 < 9.5.5
Adobe ≫ Acrobat Version >= 10.0 < 10.1.7
Adobe ≫ Acrobat Version >= 11.0 < 11.0.03
Adobe ≫ Acrobat Reader Version >= 9.0 < 9.5.5
Adobe ≫ Acrobat Reader Version >= 10.0 < 10.1.7
Adobe ≫ Acrobat Reader Version >= 11.0 < 11.0.03

03.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Adobe Reader and Acrobat Memory Corruption Vulnerability

Vulnerability

Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 89.37% 0.995
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.