CVE-2013-2729

Katalog CVE

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 66,6%

Kerentanan Integer Overflow or Wraparound pada adobe acrobat, adobe acrobat reader +6 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 28 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.

Rincian

Terbit di NVD

16 Mei 2013

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

66,6% peluang dieksploitasi; lebih tinggi dari 99,2% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability

Masuk KEV

28 Maret 2022

Tenggat CISA

18 April 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.adobe.com/support/security/bulletins/apsb13-15.html not applicable · patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2729 pemerintah AS
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html mailing list · advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2013-0826.html advisory pihak ketiga
• http://security.gentoo.org/glsa/glsa-201308-03.xml advisory pihak ketiga
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16717 broken link
• https://github.com/cisagov/vulnrichment/issues/199 issue tracking