CVE-2013-0641: Adobe Reader Buffer Overflow Vulnerability

Q: What is the severity of CVE-2013-0641?

CVE-2013-0641 has a high severity rating due to its potential to allow remote code execution via malicious PDF files.

Q: How do I fix CVE-2013-0641?

To fix CVE-2013-0641, update Adobe Reader and Acrobat to the latest versions where the vulnerability is patched.

Q: Which versions are affected by CVE-2013-0641?

CVE-2013-0641 affects Adobe Reader and Acrobat versions 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02.

Q: What types of attacks are possible with CVE-2013-0641?

Exploitation of CVE-2013-0641 can lead to arbitrary code execution if a user opens a crafted PDF file.

Q: Is CVE-2013-0641 being actively exploited?

Yes, CVE-2013-0641 was reported to be actively exploited in the wild shortly after its discovery.

Published Feb 14, 2013

Updated

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

Other sources

A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.

— CISA

Affected Software

107 affected components

Adobe Reader

Adobe Acrobat Reader=9.0

Adobe Acrobat Reader=9.1

Adobe Acrobat Reader=9.1.1

Adobe Acrobat Reader=9.1.2

Adobe Acrobat Reader=9.1.3

Adobe Acrobat Reader=9.2

Adobe Acrobat Reader=9.3

Adobe Acrobat Reader=9.3.1

Adobe Acrobat Reader=9.3.2

Adobe Acrobat Reader=9.3.3

Adobe Acrobat Reader=9.3.4

Adobe Acrobat Reader=9.4

Adobe Acrobat Reader=9.4.1

Adobe Acrobat Reader=9.4.2

Adobe Acrobat Reader=9.4.3

Adobe Acrobat Reader=9.4.4

Adobe Acrobat Reader=9.4.5

Adobe Acrobat Reader=9.4.6

Adobe Acrobat Reader=9.4.7

Adobe Acrobat Reader=9.5

Adobe Acrobat Reader=9.5.1

Adobe Acrobat Reader=9.5.2

Adobe Acrobat Reader=9.5.3

Adobe Acrobat Reader=10.0

Adobe Acrobat Reader=10.0.1

Adobe Acrobat Reader=10.0.2

Adobe Acrobat Reader=10.0.3

Adobe Acrobat Reader=10.1

Adobe Acrobat Reader=10.1.1

Adobe Acrobat Reader=10.1.2

Adobe Acrobat Reader=10.1.3

Adobe Acrobat Reader=10.1.4

Adobe Acrobat Reader=10.1.5

Adobe Acrobat Reader=11.0

Adobe Acrobat Reader=11.0.1

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=9.4.2

Adobe Acrobat=9.4.3

Adobe Acrobat=9.4.4

Adobe Acrobat=9.4.5

Adobe Acrobat=9.4.6

Adobe Acrobat=9.4.7

Adobe Acrobat=9.5

Adobe Acrobat=9.5.1

Adobe Acrobat=9.5.2

Adobe Acrobat=9.5.3

Adobe Acrobat=10.0

Adobe Acrobat=10.0.1

Adobe Acrobat=10.0.2

Adobe Acrobat=10.0.3

Adobe Acrobat=10.1

Adobe Acrobat=10.1.1

Adobe Acrobat=10.1.2

Adobe Acrobat=10.1.3

Adobe Acrobat=10.1.4

Adobe Acrobat=10.1.5

Adobe Acrobat=11.0

Adobe Acrobat=11.0.1

All of the following

Any of the following

Adobe Acrobat>=9.0<9.5.4

Adobe Acrobat>=10.0<10.1.6

Adobe Acrobat>=11.0<11.0.02

Adobe Acrobat Reader>=10.0<10.1.6

Adobe Acrobat Reader>=11.0<11.0.02

Microsoft Windows

All of the following

Adobe Acrobat Reader>=9.0<9.5.4

Linux Linux kernel

redhat Enterprise Linux Desktop=6.0

redhat Enterprise Linux Eus=5.9

redhat Enterprise Linux Eus=6.4

redhat Enterprise Linux Server=6.0

redhat Enterprise Linux Server Aus=5.9

redhat Enterprise Linux Server Aus=6.4

redhat Enterprise Linux Workstation=6.0

openSUSE openSUSE=11.4

openSUSE openSUSE=12.1

SUSE Linux Enterprise Desktop=10-sp4

SUSE Linux Enterprise Desktop=11-sp2

Event History

Feb 14, 2013

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·01:55 AM

DescriptionSeverityWeaknessAffected Software

Mar 3, 2022

Known Exploited

via CISA·12:00 AM

Mar 1, 58274

Event

via NVD·09:46 AM

Frequently Asked Questions

What is the severity of CVE-2013-0641?

CVE-2013-0641 has a high severity rating due to its potential to allow remote code execution via malicious PDF files.

How do I fix CVE-2013-0641?

To fix CVE-2013-0641, update Adobe Reader and Acrobat to the latest versions where the vulnerability is patched.

Which versions are affected by CVE-2013-0641?

CVE-2013-0641 affects Adobe Reader and Acrobat versions 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02.

What types of attacks are possible with CVE-2013-0641?