CVE-2013-0626
published 2013-01-10CVE-2013-0626: Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code…
PriorityP351critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
7.84%
94.1th percentile
Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0610.
Affected
64 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j53v-7r43-6j6f: Stack-based buffer overflow in Adobe Reader and Acrobat 9
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2013-0610 [CRITICAL] CWE-119 GHSA-j53v-7r43-6j6f: Stack-based buffer overflow in Adobe Reader and Acrobat 9
Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0626.
GHSA
GHSA-26xm-phwj-2pmp: Stack-based buffer overflow in Adobe Reader and Acrobat 9
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2013-0626 [CRITICAL] CWE-119 GHSA-26xm-phwj-2pmp: Stack-based buffer overflow in Adobe Reader and Acrobat 9
Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0610.
Red Hat
acroread: multiple code execution flaws (APSB13-02)
vendor_redhat·2013-01-08·CVSS 10.0
CVE-2013-0626 [CRITICAL] acroread: multiple code execution flaws (APSB13-02)
acroread: multiple code execution flaws (APSB13-02)
Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0610.
Red Hat
acroread: multiple code execution flaws (APSB13-02)
vendor_redhat·2013-01-08·CVSS 10.0
CVE-2013-0610 [CRITICAL] acroread: multiple code execution flaws (APSB13-02)
acroread: multiple code execution flaws (APSB13-02)
Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0626.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2013-0437 Oracle JDK: unspecified vulnerability fixed in 7u13 (2D)
bugzilla·2013-02-03·CVSS 10.0
CVE-2013-0437 [CRITICAL] CVE-2013-0437 Oracle JDK: unspecified vulnerability fixed in 7u13 (2D)
CVE-2013-0437 Oracle JDK: unspecified vulnerability fixed in 7u13 (2D)
Oracle Java SE 7 Update 13 fixes an unspecified vulnerability in the 2D component (CVE-2013-0437). Upstream has CVSSv2 scored this issue as: 10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
External Reference:
http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0237 https://rhn.redhat.com/errata/RHSA-2013-0237.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0626 https://rhn.redhat.com/errata/RHSA-2013-0626.html
Bugzilla
CVE-2013-0449 Oracle JDK: unspecified vulnerability fixed in 7u13 (Deployment)
bugzilla·2013-02-01·CVSS 5.0
CVE-2013-0449 [MEDIUM] CVE-2013-0449 Oracle JDK: unspecified vulnerability fixed in 7u13 (Deployment)
CVE-2013-0449 Oracle JDK: unspecified vulnerability fixed in 7u13 (Deployment)
Oracle Java SE 7 Update 13 fixes an unspecified vulnerability in the Deployment component (CVE-2013-0449). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:P/I:N/A:N
External Reference:
http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
Discussion:
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0237 https://rhn.redhat.com/errata/RHSA-2013-0237.html
---
This issue has been addressed in following products:
Supplementary for Red Hat Enterprise Linux 5
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2013:0626 https://rhn.redhat.com/errata/RHSA-2013-06
Bugzilla
acroread: multiple code execution flaws (APSB13-02)
bugzilla·2013-01-09·CVSS 10.0
CVE-2012-1530 [CRITICAL] acroread: multiple code execution flaws (APSB13-02)
acroread: multiple code execution flaws (APSB13-02)
Adobe security bulletin APSB13-02 describes multiple security flaws that could cause Adobe Acrobat Reader to crash and potentially allow an attacker to take control of the affected system:
These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0619, CVE-2013-0620, CVE-2013-0623).
These updates resolve a use-after-free vulnerability that could lead to code execution (CVE-2013-0602).
These updates resolve heap overflow vulnerabilities that could lead to code execution (CVE-2013-0603, CVE-2013-0604).
These updates resolve stack overflow vulnerabilities that could lead to code execution (CVE-2013-0610, CVE-2013-0626).
These updates r
http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.htmlhttp://lists.opensuse.org/opensuse-updates/2013-01/msg00028.htmlhttp://lists.opensuse.org/opensuse-updates/2013-01/msg00081.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0150.htmlhttp://security.gentoo.org/glsa/glsa-201308-03.xmlhttp://www.adobe.com/support/security/bulletins/apsb13-02.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16289http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.htmlhttp://lists.opensuse.org/opensuse-updates/2013-01/msg00028.htmlhttp://lists.opensuse.org/opensuse-updates/2013-01/msg00081.htmlhttp://rhn.redhat.com/errata/RHSA-2013-0150.htmlhttp://security.gentoo.org/glsa/glsa-201308-03.xmlhttp://www.adobe.com/support/security/bulletins/apsb13-02.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16289
2013-01-10
Published