CVE-2013-3337

16.05.2013, 11:45

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	10 UNKNOWN	NETWORK	LOW	AV:N/AC:L/Au:N/C:C/I:C/A:C
adobe	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 94%

Vendor	Product	Version
adobe	acrobat_reader	9.0
adobe	acrobat_reader	9.1
adobe	acrobat_reader	9.1.1
adobe	acrobat_reader	9.1.2
adobe	acrobat_reader	9.1.3
adobe	acrobat_reader	9.2
adobe	acrobat_reader	9.3
adobe	acrobat_reader	9.3.1
adobe	acrobat_reader	9.3.2
adobe	acrobat_reader	9.3.3
adobe	acrobat_reader	9.3.4
adobe	acrobat_reader	9.4
adobe	acrobat_reader	9.4.1
adobe	acrobat_reader	9.4.2
adobe	acrobat_reader	9.4.3
adobe	acrobat_reader	9.4.4
adobe	acrobat_reader	9.4.5
adobe	acrobat_reader	9.4.6
adobe	acrobat_reader	9.4.7
adobe	acrobat_reader	9.5
adobe	acrobat_reader	9.5.1
adobe	acrobat_reader	9.5.2
adobe	acrobat_reader	9.5.3
adobe	acrobat_reader	9.5.4
adobe	acrobat_reader	10.0
adobe	acrobat_reader	10.0.1
adobe	acrobat_reader	10.0.2
adobe	acrobat_reader	10.0.3
adobe	acrobat_reader	10.1
adobe	acrobat_reader	10.1.1
adobe	acrobat_reader	10.1.2
adobe	acrobat_reader	10.1.3
adobe	acrobat_reader	10.1.4
adobe	acrobat_reader	10.1.5
adobe	acrobat_reader	10.1.6
adobe	acrobat_reader	11.0
adobe	acrobat_reader	11.0.1
adobe	acrobat_reader	11.0.2
adobe	acrobat	9.0
adobe	acrobat	9.0
adobe	acrobat	9.1
adobe	acrobat	9.1
adobe	acrobat	9.1.1
adobe	acrobat	9.1.1
adobe	acrobat	9.1.2
adobe	acrobat	9.1.3
adobe	acrobat	9.1.3
adobe	acrobat	9.2
adobe	acrobat	9.2
adobe	acrobat	9.3
adobe	acrobat	9.3
adobe	acrobat	9.3.1
adobe	acrobat	9.3.1
adobe	acrobat	9.3.2
adobe	acrobat	9.3.2
adobe	acrobat	9.3.3
adobe	acrobat	9.3.4
adobe	acrobat	9.3.4
adobe	acrobat	9.4
adobe	acrobat	9.4.1
adobe	acrobat	9.4.1
adobe	acrobat	9.4.2
adobe	acrobat	9.4.2
adobe	acrobat	9.4.3
adobe	acrobat	9.4.3
adobe	acrobat	9.4.4
adobe	acrobat	9.4.4
adobe	acrobat	9.4.5
adobe	acrobat	9.4.5
adobe	acrobat	9.4.6
adobe	acrobat	9.4.6
adobe	acrobat	9.4.7
adobe	acrobat	9.5
adobe	acrobat	9.5.1
adobe	acrobat	9.5.2
adobe	acrobat	9.5.3
adobe	acrobat	9.5.4
adobe	acrobat	10.0
adobe	acrobat	10.0
adobe	acrobat	10.0.1
adobe	acrobat	10.0.1
adobe	acrobat	10.0.2
adobe	acrobat	10.0.3
adobe	acrobat	10.1
adobe	acrobat	10.1.1
adobe	acrobat	10.1.2
adobe	acrobat	10.1.3
adobe	acrobat	10.1.4
adobe	acrobat	10.1.5
adobe	acrobat	10.1.6
adobe	acrobat	11.0
adobe	acrobat	11.0.1
adobe	acrobat	11.0.2

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

adobe-flashplugin

raring	Fixed 11.2.202.285-0raring1 released
quantal	Fixed 11.2.202.285-0quantal1 released
precise	Fixed 11.2.202.285-0precise1 released
lucid	ignored

flashplugin-nonfree

raring	Fixed 11.2.202.285ubuntu0.13.04.1 released
quantal	Fixed 11.2.202.285ubuntu0.12.10.1 released
precise	Fixed 11.2.202.285ubuntu0.12.04.1 released
lucid	ignored

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html

http://rhn.redhat.com/errata/RHSA-2013-0826.html

http://security.gentoo.org/glsa/glsa-201308-03.xml

http://www.adobe.com/support/security/bulletins/apsb13-15.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16836

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html

http://rhn.redhat.com/errata/RHSA-2013-0826.html

http://security.gentoo.org/glsa/glsa-201308-03.xml

http://www.adobe.com/support/security/bulletins/apsb13-15.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16836