CVE-2013-0640: Adobe Reader and Acrobat Memory Corruption Vulnerability

Q: What is the severity of CVE-2013-0640?

CVE-2013-0640 is considered critical due to its potential for remote code execution.

Q: How do I fix CVE-2013-0640?

To fix CVE-2013-0640, update Adobe Reader and Acrobat to version 9.5.4 or later, 10.1.6 or later, or 11.0.2 or later.

Q: What versions are affected by CVE-2013-0640?

CVE-2013-0640 affects Adobe Reader and Acrobat versions prior to 9.5.4, 10.1.6, and 11.0.2.

Q: What type of vulnerability is CVE-2013-0640?

CVE-2013-0640 is a memory corruption vulnerability that allows attackers to execute arbitrary code.

Q: Is CVE-2013-0640 exploited in the wild?

Yes, CVE-2013-0640 has been reported to be exploited in the wild, making patching essential.

Published Feb 14, 2013

Updated

An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.

Other sources

Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

Affected Software

108 affected components

Adobe Acrobat Reader=9.0

Adobe Acrobat Reader=9.1

Adobe Acrobat Reader=9.1.1

Adobe Acrobat Reader=9.1.2

Adobe Acrobat Reader=9.1.3

Adobe Acrobat Reader=9.2

Adobe Acrobat Reader=9.3

Adobe Acrobat Reader=9.3.1

Adobe Acrobat Reader=9.3.2

Adobe Acrobat Reader=9.3.3

Adobe Acrobat Reader=9.3.4

Adobe Acrobat Reader=9.4

Adobe Acrobat Reader=9.4.1

Adobe Acrobat Reader=9.4.2

Adobe Acrobat Reader=9.4.3

Adobe Acrobat Reader=9.4.4

Adobe Acrobat Reader=9.4.5

Adobe Acrobat Reader=9.4.6

Adobe Acrobat Reader=9.4.7

Adobe Acrobat Reader=9.5

Adobe Acrobat Reader=9.5.1

Adobe Acrobat Reader=9.5.2

Adobe Acrobat Reader=9.5.3

Adobe Acrobat Reader=10.0

Adobe Acrobat Reader=10.0.1

Adobe Acrobat Reader=10.0.2

Adobe Acrobat Reader=10.0.3

Adobe Acrobat Reader=10.1

Adobe Acrobat Reader=10.1.1

Adobe Acrobat Reader=10.1.2

Adobe Acrobat Reader=10.1.3

Adobe Acrobat Reader=10.1.4

Adobe Acrobat Reader=10.1.5

Adobe Acrobat Reader=11.0

Adobe Acrobat Reader=11.0.1

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=9.4.2

Adobe Acrobat=9.4.3

Adobe Acrobat=9.4.4

Adobe Acrobat=9.4.5

Adobe Acrobat=9.4.6

Adobe Acrobat=9.4.7

Adobe Acrobat=9.5

Adobe Acrobat=9.5.1

Adobe Acrobat=9.5.2

Adobe Acrobat=9.5.3

Adobe Acrobat=10.0

Adobe Acrobat=10.0.1

Adobe Acrobat=10.0.2

Adobe Acrobat=10.0.3

Adobe Acrobat=10.1

Adobe Acrobat=10.1.1

Adobe Acrobat=10.1.2

Adobe Acrobat=10.1.3

Adobe Acrobat=10.1.4

Adobe Acrobat=10.1.5

Adobe Acrobat=11.0

Adobe Acrobat=11.0.1

Adobe Reader and Acrobat

All of the following

Any of the following

Adobe Acrobat>=9.0<9.5.4

Adobe Acrobat>=10.0<10.1.6

Adobe Acrobat>=11.0<11.0.02

Adobe Acrobat Reader>=10.0<10.1.6

Adobe Acrobat Reader>=11.0<11.0.02

Microsoft Windows

openSUSE openSUSE=11.4

openSUSE openSUSE=12.1

SUSE Linux Enterprise Desktop=10-sp4

SUSE Linux Enterprise Desktop=11-sp2

redhat Enterprise Linux Desktop=6.0

redhat Enterprise Linux Eus=5.9

redhat Enterprise Linux Eus=6.4

redhat Enterprise Linux Server=6.0

redhat Enterprise Linux Server Aus=5.9

redhat Enterprise Linux Server Aus=6.4

redhat Enterprise Linux Workstation=6.0

All of the following

Adobe Acrobat Reader>=9.0<9.5.4

Any of the following

Linux Linux kernel

Microsoft Windows

Event History

Feb 14, 2013

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·01:55 AM

DescriptionSeverityWeaknessAffected Software

Mar 3, 2022

Known Exploited

via CISA·12:00 AM

Mar 1, 58274

Event

via NVD·12:01 AM

Frequently Asked Questions

What is the severity of CVE-2013-0640?

CVE-2013-0640 is considered critical due to its potential for remote code execution.

How do I fix CVE-2013-0640?

To fix CVE-2013-0640, update Adobe Reader and Acrobat to version 9.5.4 or later, 10.1.6 or later, or 11.0.2 or later.

What versions are affected by CVE-2013-0640?

CVE-2013-0640 affects Adobe Reader and Acrobat versions prior to 9.5.4, 10.1.6, and 11.0.2.

What type of vulnerability is CVE-2013-0640?