CVE-2013-3338

EUVD-2013-3274

16.05.2013, 11:45

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	10 UNKNOWN	NETWORK	LOW		AV:N/AC:L/Au:N/C:C/I:C/A:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 95%

Affected Products (NVD)

Vendor	Product	Version
adobe	acrobat_reader	9.0
adobe	acrobat_reader	9.1
adobe	acrobat_reader	9.1.1
adobe	acrobat_reader	9.1.2
adobe	acrobat_reader	9.1.3
adobe	acrobat_reader	9.2
adobe	acrobat_reader	9.3
adobe	acrobat_reader	9.3.1
adobe	acrobat_reader	9.3.2
adobe	acrobat_reader	9.3.3
adobe	acrobat_reader	9.3.4
adobe	acrobat_reader	9.4
adobe	acrobat_reader	9.4.1
adobe	acrobat_reader	9.4.2
adobe	acrobat_reader	9.4.3
adobe	acrobat_reader	9.4.4
adobe	acrobat_reader	9.4.5
adobe	acrobat_reader	9.4.6
adobe	acrobat_reader	9.4.7
adobe	acrobat_reader	9.5
adobe	acrobat_reader	9.5.1
adobe	acrobat_reader	9.5.2
adobe	acrobat_reader	9.5.3
adobe	acrobat_reader	9.5.4
adobe	acrobat_reader	10.0
adobe	acrobat_reader	10.0.1
adobe	acrobat_reader	10.0.2
adobe	acrobat_reader	10.0.3
adobe	acrobat_reader	10.1
adobe	acrobat_reader	10.1.1
adobe	acrobat_reader	10.1.2
adobe	acrobat_reader	10.1.3
adobe	acrobat_reader	10.1.4
adobe	acrobat_reader	10.1.5
adobe	acrobat_reader	10.1.6
adobe	acrobat_reader	11.0
adobe	acrobat_reader	11.0.1
adobe	acrobat_reader	11.0.2
adobe	acrobat	9.0
adobe	acrobat	9.0
adobe	acrobat	9.1
adobe	acrobat	9.1
adobe	acrobat	9.1.1
adobe	acrobat	9.1.1
adobe	acrobat	9.1.2
adobe	acrobat	9.1.3
adobe	acrobat	9.1.3
adobe	acrobat	9.2
adobe	acrobat	9.2
adobe	acrobat	9.3
adobe	acrobat	9.3
adobe	acrobat	9.3.1
adobe	acrobat	9.3.1
adobe	acrobat	9.3.2
adobe	acrobat	9.3.2
adobe	acrobat	9.3.3
adobe	acrobat	9.3.4
adobe	acrobat	9.3.4
adobe	acrobat	9.4
adobe	acrobat	9.4.1
adobe	acrobat	9.4.1
adobe	acrobat	9.4.2
adobe	acrobat	9.4.2
adobe	acrobat	9.4.3
adobe	acrobat	9.4.3
adobe	acrobat	9.4.4
adobe	acrobat	9.4.4
adobe	acrobat	9.4.5
adobe	acrobat	9.4.5
adobe	acrobat	9.4.6
adobe	acrobat	9.4.6
adobe	acrobat	9.4.7
adobe	acrobat	9.5
adobe	acrobat	9.5.1
adobe	acrobat	9.5.2
adobe	acrobat	9.5.3
adobe	acrobat	9.5.4
adobe	acrobat	10.0
adobe	acrobat	10.0
adobe	acrobat	10.0.1
adobe	acrobat	10.0.1
adobe	acrobat	10.0.2
adobe	acrobat	10.0.3
adobe	acrobat	10.1
adobe	acrobat	10.1.1
adobe	acrobat	10.1.2
adobe	acrobat	10.1.3
adobe	acrobat	10.1.4
adobe	acrobat	10.1.5
adobe	acrobat	10.1.6
adobe	acrobat	11.0
adobe	acrobat	11.0.1
adobe	acrobat	11.0.2

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

adobe-flashplugin

lucid	ignored
precise	Fixed 11.2.202.285-0precise1 released
quantal	Fixed 11.2.202.285-0quantal1 released
raring	Fixed 11.2.202.285-0raring1 released

flashplugin-nonfree

lucid	ignored
precise	Fixed 11.2.202.285ubuntu0.12.04.1 released
quantal	Fixed 11.2.202.285ubuntu0.12.10.1 released
raring	Fixed 11.2.202.285ubuntu0.13.04.1 released

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html

http://rhn.redhat.com/errata/RHSA-2013-0826.html

http://security.gentoo.org/glsa/glsa-201308-03.xml

http://www.adobe.com/support/security/bulletins/apsb13-15.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15984

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html

http://rhn.redhat.com/errata/RHSA-2013-0826.html

http://security.gentoo.org/glsa/glsa-201308-03.xml

http://www.adobe.com/support/security/bulletins/apsb13-15.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15984