CVE-2013-0623: Critical severity adobe acrobat reader vulnerability

Published Jan 10, 2013

Updated

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-1530, CVE-2013-0601, CVE-2013-0605, CVE-2013-0616, CVE-2013-0619, and CVE-2013-0620.

Affected Software

81 affected components

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=9.4.2

Adobe Acrobat=9.4.3

Adobe Acrobat=9.4.4

Adobe Acrobat=9.4.5

Adobe Acrobat=9.4.6

Adobe Acrobat=9.4.7

Adobe Acrobat=9.5

Adobe Acrobat=9.5.1

Adobe Acrobat=9.5.2

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.1

Adobe Acrobat reader=9.1.2

Adobe Acrobat reader=9.1.3

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.3.1

Adobe Acrobat reader=9.3.2

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.4

Adobe Acrobat reader=9.4.1

Adobe Acrobat reader=9.4.2

Adobe Acrobat reader=9.4.3

Adobe Acrobat reader=9.4.4

Adobe Acrobat reader=9.4.5

Adobe Acrobat reader=9.4.6

Adobe Acrobat reader=9.4.7

Adobe Acrobat reader=9.5

Adobe Acrobat reader=9.5.1

Adobe Acrobat reader=9.5.2

Adobe Acrobat=10.0

Adobe Acrobat=10.0.1

Adobe Acrobat=10.0.2

Adobe Acrobat=10.0.3

Adobe Acrobat=10.1

Adobe Acrobat=10.1.1

Adobe Acrobat=10.1.2

Adobe Acrobat=10.1.3

Adobe Acrobat=10.1.4

Adobe Acrobat reader=10.0

Adobe Acrobat reader=10.0.1

Adobe Acrobat reader=10.0.2

Adobe Acrobat reader=10.0.3

Adobe Acrobat reader=10.1

Adobe Acrobat reader=10.1.1

Adobe Acrobat reader=10.1.2

Adobe Acrobat reader=10.1.3

Adobe Acrobat reader=10.1.4

Adobe Acrobat=11.0

Adobe Acrobat reader=11.0

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb13-02.html

Event History

Jan 10, 2013

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0623?

CVE-2013-0623 has been classified as a critical vulnerability allowing attackers to execute arbitrary code or cause a denial of service.

How do I fix CVE-2013-0623?

To remediate CVE-2013-0623, users should upgrade to Adobe Reader and Acrobat versions 9.5.3, 10.1.5, or 11.0.1 or later.

Which versions are affected by CVE-2013-0623?

CVE-2013-0623 affects Adobe Reader and Acrobat versions 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1.

Can CVE-2013-0623 lead to data loss?

Yes, CVE-2013-0623 can lead to potential data loss through arbitrary code execution or memory corruption.

Is CVE-2013-0623 still a threat?

While the vulnerability has been patched, systems running older versions are still at risk if not updated.