CVE-2013-0601: Buffer Overflow

Published Jan 10, 2013

Updated

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0605, CVE-2013-0616, CVE-2013-0619, CVE-2013-0620, and CVE-2013-0623.

Affected Software

81 affected components

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=9.4.2

Adobe Acrobat=9.4.3

Adobe Acrobat=9.4.4

Adobe Acrobat=9.4.5

Adobe Acrobat=9.4.6

Adobe Acrobat=9.4.7

Adobe Acrobat=9.5

Adobe Acrobat=9.5.1

Adobe Acrobat=9.5.2

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.1

Adobe Acrobat reader=9.1.2

Adobe Acrobat reader=9.1.3

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.3.1

Adobe Acrobat reader=9.3.2

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.4

Adobe Acrobat reader=9.4.1

Adobe Acrobat reader=9.4.2

Adobe Acrobat reader=9.4.3

Adobe Acrobat reader=9.4.4

Adobe Acrobat reader=9.4.5

Adobe Acrobat reader=9.4.6

Adobe Acrobat reader=9.4.7

Adobe Acrobat reader=9.5

Adobe Acrobat reader=9.5.1

Adobe Acrobat reader=9.5.2

Adobe Acrobat=10.0

Adobe Acrobat=10.0.1

Adobe Acrobat=10.0.2

Adobe Acrobat=10.0.3

Adobe Acrobat=10.1

Adobe Acrobat=10.1.1

Adobe Acrobat=10.1.2

Adobe Acrobat=10.1.3

Adobe Acrobat=10.1.4

Adobe Acrobat reader=10.0

Adobe Acrobat reader=10.0.1

Adobe Acrobat reader=10.0.2

Adobe Acrobat reader=10.0.3

Adobe Acrobat reader=10.1

Adobe Acrobat reader=10.1.1

Adobe Acrobat reader=10.1.2

Adobe Acrobat reader=10.1.3

Adobe Acrobat reader=10.1.4

Adobe Acrobat=11.0

Adobe Acrobat reader=11.0

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb13-02.html

Event History

Jan 10, 2013

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0601?

CVE-2013-0601 has a critical severity rating as it allows attackers to execute arbitrary code or cause a denial of service.

How do I fix CVE-2013-0601?

To fix CVE-2013-0601, update Adobe Reader and Acrobat to the latest versions 9.5.3, 10.1.5, or 11.0.1 or higher.

Which versions of Adobe Reader are affected by CVE-2013-0601?

Adobe Reader and Acrobat versions before 9.5.3, 10.1.5, and 11.0.1 are affected by CVE-2013-0601.

Can CVE-2013-0601 be exploited remotely?

Yes, CVE-2013-0601 can be exploited remotely, enabling attackers to execute arbitrary code on affected systems.

What types of attacks can CVE-2013-0601 facilitate?

CVE-2013-0601 can facilitate code execution attacks or cause memory corruption leading to denial of service.