CVE-2013-0603: Buffer Overflow
First published: Thu Jan 10 2013(Updated: )
Heap-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0604.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | =9.0 | |
| Adobe Acrobat Reader | =9.0 | |
| Adobe Acrobat Reader | =9.1 | |
| Adobe Acrobat Reader | =9.1 | |
| Adobe Acrobat Reader | =9.1.1 | |
| Adobe Acrobat Reader | =9.1.1 | |
| Adobe Acrobat Reader | =9.1.2 | |
| Adobe Acrobat Reader | =9.1.3 | |
| Adobe Acrobat Reader | =9.1.3 | |
| Adobe Acrobat Reader | =9.2 | |
| Adobe Acrobat Reader | =9.2 | |
| Adobe Acrobat Reader | =9.3 | |
| Adobe Acrobat Reader | =9.3 | |
| Adobe Acrobat Reader | =9.3.1 | |
| Adobe Acrobat Reader | =9.3.1 | |
| Adobe Acrobat Reader | =9.3.2 | |
| Adobe Acrobat Reader | =9.3.2 | |
| Adobe Acrobat Reader | =9.3.3 | |
| Adobe Acrobat Reader | =9.3.4 | |
| Adobe Acrobat Reader | =9.3.4 | |
| Adobe Acrobat Reader | =9.4 | |
| Adobe Acrobat Reader | =9.4.1 | |
| Adobe Acrobat Reader | =9.4.1 | |
| Adobe Acrobat Reader | =9.4.2 | |
| Adobe Acrobat Reader | =9.4.2 | |
| Adobe Acrobat Reader | =9.4.3 | |
| Adobe Acrobat Reader | =9.4.3 | |
| Adobe Acrobat Reader | =9.4.4 | |
| Adobe Acrobat Reader | =9.4.4 | |
| Adobe Acrobat Reader | =9.4.5 | |
| Adobe Acrobat Reader | =9.4.5 | |
| Adobe Acrobat Reader | =9.4.6 | |
| Adobe Acrobat Reader | =9.4.6 | |
| Adobe Acrobat Reader | =9.4.7 | |
| Adobe Acrobat Reader | =9.5 | |
| Adobe Acrobat Reader | =9.5.1 | |
| Adobe Acrobat Reader | =9.5.2 | |
| Adobe Acrobat Reader Notification Manager | =9.0 | |
| Adobe Acrobat Reader Notification Manager | =9.1 | |
| Adobe Acrobat Reader Notification Manager | =9.1.1 | |
| Adobe Acrobat Reader Notification Manager | =9.1.2 | |
| Adobe Acrobat Reader Notification Manager | =9.1.3 | |
| Adobe Acrobat Reader Notification Manager | =9.2 | |
| Adobe Acrobat Reader Notification Manager | =9.3 | |
| Adobe Acrobat Reader Notification Manager | =9.3.1 | |
| Adobe Acrobat Reader Notification Manager | =9.3.2 | |
| Adobe Acrobat Reader Notification Manager | =9.3.3 | |
| Adobe Acrobat Reader Notification Manager | =9.3.4 | |
| Adobe Acrobat Reader Notification Manager | =9.4 | |
| Adobe Acrobat Reader Notification Manager | =9.4.1 | |
| Adobe Acrobat Reader Notification Manager | =9.4.2 | |
| Adobe Acrobat Reader Notification Manager | =9.4.3 | |
| Adobe Acrobat Reader Notification Manager | =9.4.4 | |
| Adobe Acrobat Reader Notification Manager | =9.4.5 | |
| Adobe Acrobat Reader Notification Manager | =9.4.6 | |
| Adobe Acrobat Reader Notification Manager | =9.4.7 | |
| Adobe Acrobat Reader Notification Manager | =9.5 | |
| Adobe Acrobat Reader Notification Manager | =9.5.1 | |
| Adobe Acrobat Reader Notification Manager | =9.5.2 | |
| Adobe Acrobat Reader | =10.0 | |
| Adobe Acrobat Reader | =10.0 | |
| Adobe Acrobat Reader | =10.0.1 | |
| Adobe Acrobat Reader | =10.0.1 | |
| Adobe Acrobat Reader | =10.0.2 | |
| Adobe Acrobat Reader | =10.0.3 | |
| Adobe Acrobat Reader | =10.1 | |
| Adobe Acrobat Reader | =10.1.1 | |
| Adobe Acrobat Reader | =10.1.2 | |
| Adobe Acrobat Reader | =10.1.3 | |
| Adobe Acrobat Reader | =10.1.4 | |
| Adobe Acrobat Reader Notification Manager | =10.0 | |
| Adobe Acrobat Reader Notification Manager | =10.0.1 | |
| Adobe Acrobat Reader Notification Manager | =10.0.2 | |
| Adobe Acrobat Reader Notification Manager | =10.0.3 | |
| Adobe Acrobat Reader Notification Manager | =10.1 | |
| Adobe Acrobat Reader Notification Manager | =10.1.1 | |
| Adobe Acrobat Reader Notification Manager | =10.1.2 | |
| Adobe Acrobat Reader Notification Manager | =10.1.3 | |
| Adobe Acrobat Reader Notification Manager | =10.1.4 | |
| Adobe Acrobat Reader | =11.0 | |
| Adobe Acrobat Reader Notification Manager | =11.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html
- http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html
- http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html
- http://rhn.redhat.com/errata/RHSA-2013-0150.html
- http://security.gentoo.org/glsa/glsa-201308-03.xml
- http://www.adobe.com/support/security/bulletins/apsb13-02.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16200
Frequently Asked Questions
What is the severity of CVE-2013-0603?
CVE-2013-0603 is classified as a critical vulnerability due to its potential to allow attackers to execute arbitrary code.
How do I fix CVE-2013-0603?
To mitigate CVE-2013-0603, update Adobe Reader or Acrobat to 9.5.3 or later for version 9, 10.1.5 or later for version 10, and 11.0.1 or later for version 11.
What products are affected by CVE-2013-0603?
CVE-2013-0603 affects Adobe Reader and Acrobat versions 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1.
What types of attacks can exploit CVE-2013-0603?
CVE-2013-0603 can be exploited via unspecified vectors that lead to a heap-based buffer overflow.
Is CVE-2013-0603 different from CVE-2013-0604?
Yes, CVE-2013-0603 is a different vulnerability than CVE-2013-0604, despite both being related to Adobe products.
- agent/references
- agent/type
- agent/severity
- agent/weakness
- agent/remedy
- agent/author
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/9.0
- version/adobe acrobat reader/9.1
- version/adobe acrobat reader/9.1.1
- version/adobe acrobat reader/9.1.2
- version/adobe acrobat reader/9.1.3
- version/adobe acrobat reader/9.2
- version/adobe acrobat reader/9.3
- version/adobe acrobat reader/9.3.1
- version/adobe acrobat reader/9.3.2
- version/adobe acrobat reader/9.3.3
- version/adobe acrobat reader/9.3.4
- version/adobe acrobat reader/9.4
- version/adobe acrobat reader/9.4.1
- version/adobe acrobat reader/9.4.2
- version/adobe acrobat reader/9.4.3
- version/adobe acrobat reader/9.4.4
- version/adobe acrobat reader/9.4.5
- version/adobe acrobat reader/9.4.6
- version/adobe acrobat reader/9.4.7
- version/adobe acrobat reader/9.5
- version/adobe acrobat reader/9.5.1
- version/adobe acrobat reader/9.5.2
- canonical/adobe acrobat reader notification manager
- version/adobe acrobat reader notification manager/9.0
- version/adobe acrobat reader notification manager/9.1
- version/adobe acrobat reader notification manager/9.1.1
- version/adobe acrobat reader notification manager/9.1.2
- version/adobe acrobat reader notification manager/9.1.3
- version/adobe acrobat reader notification manager/9.2
- version/adobe acrobat reader notification manager/9.3
- version/adobe acrobat reader notification manager/9.3.1
- version/adobe acrobat reader notification manager/9.3.2
- version/adobe acrobat reader notification manager/9.3.3
- version/adobe acrobat reader notification manager/9.3.4
- version/adobe acrobat reader notification manager/9.4
- version/adobe acrobat reader notification manager/9.4.1
- version/adobe acrobat reader notification manager/9.4.2
- version/adobe acrobat reader notification manager/9.4.3
- version/adobe acrobat reader notification manager/9.4.4
- version/adobe acrobat reader notification manager/9.4.5
- version/adobe acrobat reader notification manager/9.4.6
- version/adobe acrobat reader notification manager/9.4.7
- version/adobe acrobat reader notification manager/9.5
- version/adobe acrobat reader notification manager/9.5.1
- version/adobe acrobat reader notification manager/9.5.2
- version/adobe acrobat reader/10.0
- version/adobe acrobat reader/10.0.1
- version/adobe acrobat reader/10.0.2
- version/adobe acrobat reader/10.0.3
- version/adobe acrobat reader/10.1
- version/adobe acrobat reader/10.1.1
- version/adobe acrobat reader/10.1.2
- version/adobe acrobat reader/10.1.3
- version/adobe acrobat reader/10.1.4
- version/adobe acrobat reader notification manager/10.0
- version/adobe acrobat reader notification manager/10.0.1
- version/adobe acrobat reader notification manager/10.0.2
- version/adobe acrobat reader notification manager/10.0.3
- version/adobe acrobat reader notification manager/10.1
- version/adobe acrobat reader notification manager/10.1.1
- version/adobe acrobat reader notification manager/10.1.2
- version/adobe acrobat reader notification manager/10.1.3
- version/adobe acrobat reader notification manager/10.1.4
- version/adobe acrobat reader/11.0
- version/adobe acrobat reader notification manager/11.0