CVE-2013-3337: Buffer Overflow

Published May 16, 2013

Updated

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.

Affected Software

93 affected components

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.1

Adobe Acrobat reader=9.1.2

Adobe Acrobat reader=9.1.3

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.3.1

Adobe Acrobat reader=9.3.2

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.4

Adobe Acrobat reader=9.4.1

Adobe Acrobat reader=9.4.2

Adobe Acrobat reader=9.4.3

Adobe Acrobat reader=9.4.4

Adobe Acrobat reader=9.4.5

Adobe Acrobat reader=9.4.6

Adobe Acrobat reader=9.4.7

Adobe Acrobat reader=9.5

Adobe Acrobat reader=9.5.1

Adobe Acrobat reader=9.5.2

Adobe Acrobat reader=9.5.3

Adobe Acrobat reader=9.5.4

Adobe Acrobat reader=10.0

Adobe Acrobat reader=10.0.1

Adobe Acrobat reader=10.0.2

Adobe Acrobat reader=10.0.3

Adobe Acrobat reader=10.1

Adobe Acrobat reader=10.1.1

Adobe Acrobat reader=10.1.2

Adobe Acrobat reader=10.1.3

Adobe Acrobat reader=10.1.4

Adobe Acrobat reader=10.1.5

Adobe Acrobat reader=10.1.6

Adobe Acrobat reader=11.0

Adobe Acrobat reader=11.0.1

Adobe Acrobat reader=11.0.2

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=9.4.2

Adobe Acrobat=9.4.3

Adobe Acrobat=9.4.4

Adobe Acrobat=9.4.5

Adobe Acrobat=9.4.6

Adobe Acrobat=9.4.7

Adobe Acrobat=9.5

Adobe Acrobat=9.5.1

Adobe Acrobat=9.5.2

Adobe Acrobat=9.5.3

Adobe Acrobat=9.5.4

Adobe Acrobat=10.0

Adobe Acrobat=10.0.1

Adobe Acrobat=10.0.2

Adobe Acrobat=10.0.3

Adobe Acrobat=10.1

Adobe Acrobat=10.1.1

Adobe Acrobat=10.1.2

Adobe Acrobat=10.1.3

Adobe Acrobat=10.1.4

Adobe Acrobat=10.1.5

Adobe Acrobat=10.1.6

Adobe Acrobat=11.0

Adobe Acrobat=11.0.1

Adobe Acrobat=11.0.2

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb13-15.html

Event History

May 16, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3337?

CVE-2013-3337 has a critical severity level as it allows attackers to execute arbitrary code or cause a denial of service.

How do I fix CVE-2013-3337?

To fix CVE-2013-3337, update Adobe Reader and Acrobat to versions 9.5.5, 10.1.7, or 11.0.3 and above.

What versions of Adobe are affected by CVE-2013-3337?

CVE-2013-3337 affects Adobe Reader and Acrobat versions 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.3.

What type of vulnerabilities does CVE-2013-3337 exploit?

CVE-2013-3337 exploits memory corruption vulnerabilities that can lead to arbitrary code execution.

Is there a workaround for CVE-2013-3337 if I can't update?

There are no recommended workarounds for CVE-2013-3337; updating the software is the only effective measure.