CVE-2013-0606: Buffer Overflow

Published Jan 10, 2013

Updated

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0612, CVE-2013-0615, CVE-2013-0617, and CVE-2013-0621.

Affected Software

81 affected components

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=9.4.2

Adobe Acrobat=9.4.3

Adobe Acrobat=9.4.4

Adobe Acrobat=9.4.5

Adobe Acrobat=9.4.6

Adobe Acrobat=9.4.7

Adobe Acrobat=9.5

Adobe Acrobat=9.5.1

Adobe Acrobat=9.5.2

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.1

Adobe Acrobat reader=9.1.2

Adobe Acrobat reader=9.1.3

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.3.1

Adobe Acrobat reader=9.3.2

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.4

Adobe Acrobat reader=9.4.1

Adobe Acrobat reader=9.4.2

Adobe Acrobat reader=9.4.3

Adobe Acrobat reader=9.4.4

Adobe Acrobat reader=9.4.5

Adobe Acrobat reader=9.4.6

Adobe Acrobat reader=9.4.7

Adobe Acrobat reader=9.5

Adobe Acrobat reader=9.5.1

Adobe Acrobat reader=9.5.2

Adobe Acrobat=10.0

Adobe Acrobat=10.0.1

Adobe Acrobat=10.0.2

Adobe Acrobat=10.0.3

Adobe Acrobat=10.1

Adobe Acrobat=10.1.1

Adobe Acrobat=10.1.2

Adobe Acrobat=10.1.3

Adobe Acrobat=10.1.4

Adobe Acrobat reader=10.0

Adobe Acrobat reader=10.0.1

Adobe Acrobat reader=10.0.2

Adobe Acrobat reader=10.0.3

Adobe Acrobat reader=10.1

Adobe Acrobat reader=10.1.1

Adobe Acrobat reader=10.1.2

Adobe Acrobat reader=10.1.3

Adobe Acrobat reader=10.1.4

Adobe Acrobat=11.0

Adobe Acrobat reader=11.0

Event History

Jan 10, 2013

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0606?

CVE-2013-0606 has a critical severity rating due to the potential for arbitrary code execution.

How do I fix CVE-2013-0606?

To fix CVE-2013-0606, update Adobe Reader and Acrobat to the latest version available.

Which versions are affected by CVE-2013-0606?

CVE-2013-0606 affects Adobe Reader and Acrobat versions 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1.

What types of attacks can exploit CVE-2013-0606?

CVE-2013-0606 can be exploited by attackers through specially crafted PDF files that trigger the buffer overflow.

Is CVE-2013-0606 still a threat today?

While CVE-2013-0606 is an older vulnerability, systems running unpatched versions remain at risk if they still use affected software.