CVE-2013-2729

critical · 9.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2022-03-28Remediation due 2022-04-18

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.

9.8

CVSS

66.6%

EPSS (exploit prob.)

99th

EPSS percentile

2013-05-16

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-190

Affected products

Vendor	Product	Affected versions
adobe	acrobat	>= 9.0, < 9.5.5
adobe	acrobat	>= 10.0, < 10.1.7
adobe	acrobat	>= 11.0, < 11.0.03
adobe	acrobat_reader	>= 9.0, < 9.5.5
adobe	acrobat_reader	>= 10.0, < 10.1.7
adobe	acrobat_reader	>= 11.0, < 11.0.03
suse	linux_enterprise_desktop	10
suse	linux_enterprise_desktop	11
redhat	enterprise_linux_desktop	6.0
redhat	enterprise_linux_eus	5.9
redhat	enterprise_linux_eus	6.4
redhat	enterprise_linux_server	6.0
redhat	enterprise_linux_server_aus	5.9
redhat	enterprise_linux_server_aus	6.4
redhat	enterprise_linux_workstation	6.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-2729