CVE-2013-3346: Adobe Reader and Acrobat Memory Corruption Vulnerability
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.
Other sources
Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3346?
CVE-2013-3346 is classified as a critical vulnerability that can lead to denial of service and execution of arbitrary code.
How can I fix CVE-2013-3346?
To fix CVE-2013-3346, update to Adobe Reader and Acrobat versions 9.5.5, 10.1.7, or 11.0.3 or later.
What types of Adobe products are affected by CVE-2013-3346?
CVE-2013-3346 affects Adobe Acrobat Reader and Acrobat across several versions including 9.x, 10.x, and 11.x.
What are the potential impacts of CVE-2013-3346?
Exploitation of CVE-2013-3346 may allow attackers to execute arbitrary code on the victim's machine or cause memory corruption.
Are older versions of Adobe Reader and Acrobat safe from CVE-2013-3346?
No, older versions prior to the patches will remain vulnerable to CVE-2013-3346, making it essential to update.