$ cve CVE-2013-0640 JSON

CVE-2013-0640 KEV EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 86.9% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-03-24.

Description

Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	86.93% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-787
On CISA KEV	yes — remediate by 2022-03-24
Public exploit	yes
Published	2013-02-14
Last modified	2026-06-16

CISA KEV

Name	Adobe Reader and Acrobat Memory Corruption Vulnerability
Added	2022-03-03
Due	2022-03-24
Vendor / product	Adobe / Reader and Acrobat
Ransomware use	none reported

Affected (12)

Vendor	Product
adobe	acrobat
adobe	acrobat reader
apple	mac os x
linux	linux kernel
microsoft	windows
opensuse	opensuse
redhat	enterprise linux desktop
redhat	enterprise linux eus
redhat	enterprise linux server
redhat	enterprise linux server aus
redhat	enterprise linux workstation
suse	linux enterprise desktop

Public exploits

Source	Title	Date
exploit-db	Adobe Acrobat Reader - ASLR + DEP Bypass with Sandbox Bypass	2013-11-28

References

→ the Explorer · watch your stack · NVD