var-201309-0156
Vulnerability from variot
Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3352 and CVE-2013-3354. Adobe Acrobat and Reader are prone to an unspecified memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition. Note: This issue is previously discussed in BID 62293 (Adobe Acrobat and Reader APSB13-22 Multiple Remote Code Execution Vulnerabilities), but has been moved to its own record for better documentation. Adobe Reader is a free PDF file reader, and Acrobat is a PDF file editing and conversion tool
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-201309-0156", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "acrobat", scope: "eq", trust: 2.2, vendor: "adobe", version: "11.0.3", }, { model: "acrobat", scope: "eq", trust: 2.2, vendor: "adobe", version: "11.0.2", }, { model: "acrobat", scope: "eq", trust: 2.2, vendor: "adobe", version: "11.0.1", }, { model: "acrobat", scope: "eq", trust: 1.6, vendor: "adobe", version: "10.1.7", }, { model: "acrobat", scope: "eq", trust: 1.6, vendor: "adobe", version: "10.1.6", }, { model: "acrobat", scope: "eq", trust: 1.6, vendor: "adobe", version: "10.1.5", }, { model: "acrobat", scope: "eq", trust: 1.6, vendor: "adobe", version: "11.0", }, { model: "acrobat reader", scope: "eq", trust: 1.6, vendor: "adobe", version: "10.0.2", }, { model: "acrobat reader", scope: "eq", trust: 1.6, vendor: "adobe", version: "10.1.4", }, { model: "acrobat reader", scope: "eq", trust: 1.6, vendor: "adobe", version: "10.1.1", }, { model: "acrobat reader", scope: "eq", trust: 1.6, vendor: "adobe", version: "10.0", }, { model: "acrobat reader", scope: "eq", trust: 1.6, vendor: "adobe", version: "10.1.3", }, { model: "acrobat reader", scope: "eq", trust: 1.6, vendor: "adobe", version: "10.1.6", }, { model: "acrobat", scope: "eq", trust: 1, vendor: "adobe", version: "10.1.2", }, { model: "acrobat", scope: "eq", trust: 1, vendor: "adobe", version: "10.1", }, { model: "acrobat reader", scope: "eq", trust: 1, vendor: "adobe", version: "11.0.2", }, { model: "acrobat", scope: "eq", trust: 1, vendor: "adobe", version: "10.0.1", }, { model: "acrobat", scope: "eq", trust: 1, vendor: "adobe", version: "10.0.2", }, { model: "acrobat reader", scope: "eq", trust: 1, vendor: "adobe", version: "11.0", }, { model: "acrobat reader", scope: "eq", trust: 1, vendor: "adobe", version: "10.0.3", }, { model: "acrobat", scope: "eq", trust: 1, vendor: "adobe", version: "10.0", }, { model: "acrobat", scope: "eq", trust: 1, vendor: "adobe", version: "10.1.1", }, { model: "acrobat", scope: "eq", trust: 1, vendor: "adobe", version: "10.1.3", }, { model: "acrobat reader", scope: "eq", trust: 1, vendor: "adobe", version: "10.1.5", }, { model: "acrobat reader", scope: "eq", trust: 1, vendor: "adobe", version: "11.0.1", }, { model: "acrobat", scope: "eq", trust: 1, vendor: "adobe", version: "10.0.3", }, { model: "acrobat", scope: "eq", trust: 1, vendor: "adobe", version: "10.1.4", }, { model: "acrobat reader", scope: "eq", trust: 1, vendor: "adobe", version: "10.1.2", }, { model: "acrobat reader", scope: "eq", trust: 1, vendor: "adobe", version: "10.1", }, { model: "acrobat reader", scope: "eq", trust: 1, vendor: "adobe", version: "10.0.1", }, { model: "acrobat reader", scope: "eq", trust: 1, vendor: "adobe", version: "11.0.3", }, { model: "acrobat reader", scope: "eq", trust: 1, vendor: "adobe", version: "10.1.7", }, { model: "reader", scope: "lt", trust: 0.8, vendor: "adobe", version: "11.x (windows macintosh)", }, { model: "acrobat", scope: "eq", trust: 0.8, vendor: "adobe", version: "xi (11.0.04)", }, { model: "acrobat", scope: "lt", trust: 0.8, vendor: "adobe", version: "(windows macintosh)", }, { model: "acrobat", scope: "eq", trust: 0.8, vendor: "adobe", version: "x (10.1.8)", }, { model: "reader", scope: "eq", trust: 0.8, vendor: "adobe", version: "xi (11.0.04)", }, { model: "reader", scope: "lt", trust: 0.8, vendor: "adobe", version: "(windows macintosh)", }, { model: "acrobat", scope: "lt", trust: 0.8, vendor: "adobe", version: "11.x (windows macintosh)", }, { model: "reader", scope: "eq", trust: 0.8, vendor: "adobe", version: "x (10.1.8)", }, { model: "reader", scope: "eq", trust: 0.6, vendor: "adobe", version: "11.0.3", }, { model: "reader", scope: "eq", trust: 0.6, vendor: "adobe", version: "11.0.2", }, { model: "reader", scope: "eq", trust: 0.6, vendor: "adobe", version: "10.1.7", }, { model: "reader", scope: "eq", trust: 0.6, vendor: "adobe", version: "10.1.6", }, { model: "reader", scope: "eq", trust: 0.6, vendor: "adobe", version: "10.1.5", }, { model: "reader", scope: "eq", trust: 0.6, vendor: "adobe", version: "10.0.1", }, { model: "reader", scope: "ne", trust: 0.6, vendor: "adobe", version: "x10.1.8", }, { model: "acrobat", scope: "ne", trust: 0.6, vendor: "adobe", version: "x10.1.8", }, { model: "acrobat", scope: "eq", trust: 0.3, vendor: "adobe", version: "x11.0.3", }, { model: "reader xi", scope: "ne", trust: 0.3, vendor: "adobe", version: "11.0.4", }, { model: "reader", scope: "ne", trust: 0.3, vendor: "adobe", version: "11.0.4", }, { model: "acrobat xi", scope: "ne", trust: 0.3, vendor: "adobe", version: "11.0.4", }, { model: "acrobat", scope: "ne", trust: 0.3, vendor: "adobe", version: "11.0.4", }, ], sources: [ { db: "BID", id: "62435", }, { db: "JVNDB", id: "JVNDB-2013-004080", }, { db: "CNNVD", id: "CNNVD-201309-150", }, { db: "NVD", id: "CVE-2013-3355", }, ], }, configurations: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", children: { "@container": "@list", }, cpe_match: { "@container": "@list", }, data: { "@container": "@list", }, nodes: { "@container": "@list", }, }, data: [ { CVE_data_version: "4.0", nodes: [ { cpe_match: [ { cpe22Uri: "cpe:/a:adobe:acrobat", vulnerable: true, }, { cpe22Uri: "cpe:/a:adobe:acrobat_reader", vulnerable: true, }, ], operator: "OR", }, ], }, ], sources: [ { db: "JVNDB", id: "JVNDB-2013-004080", }, ], }, credits: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Mateusz Jurczyk and Gynvael Coldwind of the Google Security Team", sources: [ { db: "BID", id: "62435", }, ], trust: 0.3, }, cve: "CVE-2013-3355", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", author: "nvd@nist.gov", availabilityImpact: "COMPLETE", baseScore: 10, confidentialityImpact: "COMPLETE", exploitabilityScore: 10, id: "CVE-2013-3355", impactScore: 10, integrityImpact: "COMPLETE", severity: "HIGH", trust: 1.8, vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C", version: "2.0", }, { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", author: "VULHUB", availabilityImpact: "COMPLETE", baseScore: 10, confidentialityImpact: "COMPLETE", exploitabilityScore: 10, id: "VHN-63357", impactScore: 10, integrityImpact: "COMPLETE", severity: "HIGH", trust: 0.1, vectorString: "AV:N/AC:L/AU:N/C:C/I:C/A:C", version: "2.0", }, ], cvssV3: [], severity: [ { author: "nvd@nist.gov", id: "CVE-2013-3355", trust: 1, value: "HIGH", }, { author: "NVD", id: "CVE-2013-3355", trust: 0.8, value: "High", }, { author: "CNNVD", id: "CNNVD-201309-150", trust: 0.6, value: "CRITICAL", }, { author: "VULHUB", id: "VHN-63357", trust: 0.1, value: "HIGH", }, ], }, ], sources: [ { db: "VULHUB", id: "VHN-63357", }, { db: "JVNDB", id: "JVNDB-2013-004080", }, { db: "CNNVD", id: "CNNVD-201309-150", }, { db: "NVD", id: "CVE-2013-3355", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3352 and CVE-2013-3354. Adobe Acrobat and Reader are prone to an unspecified memory-corruption vulnerability. \nAttackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications. Failed exploit attempts will likely cause a denial-of-service condition. \nNote: This issue is previously discussed in BID 62293 (Adobe Acrobat and Reader APSB13-22 Multiple Remote Code Execution Vulnerabilities), but has been moved to its own record for better documentation. Adobe Reader is a free PDF file reader, and Acrobat is a PDF file editing and conversion tool", sources: [ { db: "NVD", id: "CVE-2013-3355", }, { db: "JVNDB", id: "JVNDB-2013-004080", }, { db: "BID", id: "62435", }, { db: "VULHUB", id: "VHN-63357", }, ], trust: 1.98, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2013-3355", trust: 2.8, }, { db: "JVNDB", id: "JVNDB-2013-004080", trust: 0.8, }, { db: "CNNVD", id: "CNNVD-201309-150", trust: 0.7, }, { db: "BID", id: "62435", trust: 0.4, }, { db: "VULHUB", id: "VHN-63357", trust: 0.1, }, ], sources: [ { db: "VULHUB", id: "VHN-63357", }, { db: "BID", id: "62435", }, { db: "JVNDB", id: "JVNDB-2013-004080", }, { db: "CNNVD", id: "CNNVD-201309-150", }, { db: "NVD", id: "CVE-2013-3355", }, ], }, id: "VAR-201309-0156", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "VULHUB", id: "VHN-63357", }, ], trust: 0.01, }, last_update_date: "2024-08-14T14:21:16.759000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "APSB13-22", trust: 0.8, url: "http://www.adobe.com/support/security/bulletins/apsb13-22.html", }, { title: "APSB13-22 (cq09051858)", trust: 0.8, url: "http://helpx.adobe.com/jp/acrobat/kb/cq09051858.html", }, { title: "アドビ システムズ社 Adobe Reader の脆弱性に関するお知らせ", trust: 0.8, url: "http://www.fmworld.net/biz/common/adobe/20130912.html", }, ], sources: [ { db: "JVNDB", id: "JVNDB-2013-004080", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-119", trust: 1.9, }, ], sources: [ { db: "VULHUB", id: "VHN-63357", }, { db: "JVNDB", id: "JVNDB-2013-004080", }, { db: "NVD", id: "CVE-2013-3355", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 2, url: "http://www.adobe.com/support/security/bulletins/apsb13-22.html", }, { trust: 1.1, url: "https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a18826", }, { trust: 0.8, url: "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-3355", }, { trust: 0.8, url: "http://www.ipa.go.jp/security/ciadr/vul/20130911-adobereader.html", }, { trust: 0.8, url: "http://www.jpcert.or.jp/at/2013/at130039.html", }, { trust: 0.8, url: "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-3355", }, { trust: 0.8, url: "http://www.npa.go.jp/cyberpolice/topics?seq=12255", }, { trust: 0.3, url: "http://www.adobe.com/products/acrobat/", }, { trust: 0.3, url: "http://www.adobe.com", }, { trust: 0.3, url: "http://get.adobe.com/reader/", }, ], sources: [ { db: "VULHUB", id: "VHN-63357", }, { db: "BID", id: "62435", }, { db: "JVNDB", id: "JVNDB-2013-004080", }, { db: "CNNVD", id: "CNNVD-201309-150", }, { db: "NVD", id: "CVE-2013-3355", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "VULHUB", id: "VHN-63357", }, { db: "BID", id: "62435", }, { db: "JVNDB", id: "JVNDB-2013-004080", }, { db: "CNNVD", id: "CNNVD-201309-150", }, { db: "NVD", id: "CVE-2013-3355", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2013-09-12T00:00:00", db: "VULHUB", id: "VHN-63357", }, { date: "2013-09-10T00:00:00", db: "BID", id: "62435", }, { date: "2013-09-13T00:00:00", db: "JVNDB", id: "JVNDB-2013-004080", }, { date: "2013-09-16T00:00:00", db: "CNNVD", id: "CNNVD-201309-150", }, { date: "2013-09-12T13:28:24.513000", db: "NVD", id: "CVE-2013-3355", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2017-09-19T00:00:00", db: "VULHUB", id: "VHN-63357", }, { date: "2013-09-10T00:00:00", db: "BID", id: "62435", }, { date: "2013-09-13T00:00:00", db: "JVNDB", id: "JVNDB-2013-004080", }, { date: "2013-09-16T00:00:00", db: "CNNVD", id: "CNNVD-201309-150", }, { date: "2017-09-19T01:36:40.640000", db: "NVD", id: "CVE-2013-3355", }, ], }, threat_type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "remote", sources: [ { db: "CNNVD", id: "CNNVD-201309-150", }, ], trust: 0.6, }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Windows and Mac OS X Run on Adobe Reader and Acrobat Vulnerable to arbitrary code execution", sources: [ { db: "JVNDB", id: "JVNDB-2013-004080", }, ], trust: 0.8, }, type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "buffer overflow", sources: [ { db: "CNNVD", id: "CNNVD-201309-150", }, ], trust: 0.6, }, }
Log in or create an account to share your comment.
This schema specifies the format of a comment related to a security advisory.
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.