First published: Thu Sep 12 2013(Updated: )
Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-3357.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | =10.0 | |
Adobe Acrobat Reader | =10.0 | |
Adobe Acrobat Reader | =10.0.1 | |
Adobe Acrobat Reader | =10.0.1 | |
Adobe Acrobat Reader | =10.0.2 | |
Adobe Acrobat Reader | =10.0.3 | |
Adobe Acrobat Reader | =10.1 | |
Adobe Acrobat Reader | =10.1.1 | |
Adobe Acrobat Reader | =10.1.2 | |
Adobe Acrobat Reader | =10.1.3 | |
Adobe Acrobat Reader | =10.1.4 | |
Adobe Acrobat Reader | =10.1.5 | |
Adobe Acrobat Reader | =10.1.6 | |
Adobe Acrobat Reader | =10.1.7 | |
Apple iOS and macOS | ||
Microsoft Windows | ||
Adobe Acrobat Reader Notification Manager | =11.0 | |
Adobe Acrobat Reader Notification Manager | =11.0.1 | |
Adobe Acrobat Reader Notification Manager | =11.0.2 | |
Adobe Acrobat Reader Notification Manager | =11.0.3 | |
Adobe Acrobat Reader Notification Manager | =10.0 | |
Adobe Acrobat Reader Notification Manager | =10.0.1 | |
Adobe Acrobat Reader Notification Manager | =10.0.2 | |
Adobe Acrobat Reader Notification Manager | =10.0.3 | |
Adobe Acrobat Reader Notification Manager | =10.1 | |
Adobe Acrobat Reader Notification Manager | =10.1.1 | |
Adobe Acrobat Reader Notification Manager | =10.1.2 | |
Adobe Acrobat Reader Notification Manager | =10.1.3 | |
Adobe Acrobat Reader Notification Manager | =10.1.4 | |
Adobe Acrobat Reader Notification Manager | =10.1.5 | |
Adobe Acrobat Reader Notification Manager | =10.1.6 | |
Adobe Acrobat Reader Notification Manager | =10.1.7 | |
Adobe Acrobat Reader | =11.0 | |
Adobe Acrobat Reader | =11.0.1 | |
Adobe Acrobat Reader | =11.0.2 | |
Adobe Acrobat Reader | =11.0.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-3358 is classified as a critical vulnerability that allows execution of arbitrary code.
To fix CVE-2013-3358, update Adobe Reader and Acrobat to the latest version available, specifically version 10.1.8 or 11.0.4 and later.
CVE-2013-3358 affects Adobe Reader and Acrobat versions prior to 10.1.8 and 11.x prior to 11.0.4.
Yes, CVE-2013-3358 can be exploited remotely without user interaction through malicious PDF files.
CVE-2013-3358 is a different vulnerability than CVE-2013-3357 but is part of the same security bulletins regarding Adobe products.