CVE-2013-0602: Use After Free
Published Jan 10, 2013
·Updated
Use-after-free vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors.
Affected Software
81 affected components
Adobe Acrobat=9.0
Adobe Acrobat=9.0
Adobe Acrobat=9.1
Adobe Acrobat=9.1
Adobe Acrobat=9.1.1
Adobe Acrobat=9.1.1
Adobe Acrobat=9.1.2
Adobe Acrobat=9.1.3
Adobe Acrobat=9.1.3
Adobe Acrobat=9.2
Adobe Acrobat=9.2
Adobe Acrobat=9.3
Adobe Acrobat=9.3
Adobe Acrobat=9.3.1
Adobe Acrobat=9.3.1
Adobe Acrobat=9.3.2
Adobe Acrobat=9.3.2
Adobe Acrobat=9.3.3
Adobe Acrobat=9.3.4
Adobe Acrobat=9.3.4
Adobe Acrobat=9.4
Adobe Acrobat=9.4.1
Adobe Acrobat=9.4.1
Adobe Acrobat=9.4.2
Adobe Acrobat=9.4.2
Adobe Acrobat=9.4.3
Adobe Acrobat=9.4.3
Adobe Acrobat=9.4.4
Adobe Acrobat=9.4.4
Adobe Acrobat=9.4.5
Adobe Acrobat=9.4.5
Adobe Acrobat=9.4.6
Adobe Acrobat=9.4.6
Adobe Acrobat=9.4.7
Adobe Acrobat=9.5
Adobe Acrobat=9.5.1
Adobe Acrobat=9.5.2
Adobe Acrobat reader=9.0
Adobe Acrobat reader=9.1
Adobe Acrobat reader=9.1.1
Adobe Acrobat reader=9.1.2
Adobe Acrobat reader=9.1.3
Adobe Acrobat reader=9.2
Adobe Acrobat reader=9.3
Adobe Acrobat reader=9.3.1
Adobe Acrobat reader=9.3.2
Adobe Acrobat reader=9.3.3
Adobe Acrobat reader=9.3.4
Adobe Acrobat reader=9.4
Adobe Acrobat reader=9.4.1
Adobe Acrobat reader=9.4.2
Adobe Acrobat reader=9.4.3
Adobe Acrobat reader=9.4.4
Adobe Acrobat reader=9.4.5
Adobe Acrobat reader=9.4.6
Adobe Acrobat reader=9.4.7
Adobe Acrobat reader=9.5
Adobe Acrobat reader=9.5.1
Adobe Acrobat reader=9.5.2
Adobe Acrobat=10.0
Adobe Acrobat=10.0
Adobe Acrobat=10.0.1
Adobe Acrobat=10.0.1
Adobe Acrobat=10.0.2
Adobe Acrobat=10.0.3
Adobe Acrobat=10.1
Adobe Acrobat=10.1.1
Adobe Acrobat=10.1.2
Adobe Acrobat=10.1.3
Adobe Acrobat=10.1.4
Adobe Acrobat reader=10.0
Adobe Acrobat reader=10.0.1
Adobe Acrobat reader=10.0.2
Adobe Acrobat reader=10.0.3
Adobe Acrobat reader=10.1
Adobe Acrobat reader=10.1.1
Adobe Acrobat reader=10.1.2
Adobe Acrobat reader=10.1.3
Adobe Acrobat reader=10.1.4
Adobe Acrobat=11.0
Adobe Acrobat reader=11.0
Remediation
Event History
Jan 10, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0602?
CVE-2013-0602 has been classified as a critical vulnerability that allows attackers to execute arbitrary code.
2
How do I fix CVE-2013-0602?
To fix CVE-2013-0602, upgrade Adobe Reader and Acrobat to version 9.5.3 or newer, 10.1.5 or newer, or 11.0.1 or newer.
3
Which versions of Adobe Reader are affected by CVE-2013-0602?
CVE-2013-0602 affects Adobe Reader versions prior to 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1.
4
What types of vulnerabilities does CVE-2013-0602 represent?
CVE-2013-0602 is a use-after-free vulnerability affecting Adobe Reader and Acrobat.
5
Can CVE-2013-0602 be exploited remotely?
Yes, CVE-2013-0602 can be exploited remotely via malicious vectors that induce use-after-free conditions.