CVE-2013-0641

CVE-2013-0641 is a high-severity (CVSS 7.8) vulnerability in Adobe Reader. CISA added it to the Known Exploited Vulnerabilities catalog on March 3, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by March 24, 2022. CISA does not currently list it as used in ransomware campaigns. Adobe has 83 vulnerabilities in the KEV catalog, 11 of them linked to ransomware.

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

• http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html
• http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html
• http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html
• http://rhn.redhat.com/errata/RHSA-2013-0551.html
• http://security.gentoo.org/glsa/glsa-201308-03.xml