Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

acroread was updated to 9.5.4 to fix remote code execution problems.
(CVE-2013-0640, CVE-2013-0641)

More information can be found on:
&#9;http://www.adobe.com/support/security/bulletins/apsb13-07.html

The remote host is affected by the vulnerability described in GLSA-201308-03 (Adobe Reader: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Reader. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF       file, possibly resulting in arbitrary code execution or a Denial of       Service condition. A local attacker could gain privileges via unspecified       vectors.
  Workaround :

    There is no known workaround at this time.

Acrobat Reader was updated to 9.5.4 which fixes two critical security issues where attackers supplying PDFs could have caused code execution with acrobat. (CVE-2013-0640 / CVE-2013-0641)

More information can be found on :

https://www.adobe.com/support/security/bulletins/apsb13-07.html

Acrobat Reader has been updated to 9.5.4 which fixes two critical security issues where attackers supplying PDFs could have caused code execution with acrobat. (CVE-2013-0640 / CVE-2013-0641)

More information can be found on :

https://www.adobe.com/support/security/bulletins/apsb13-07.html

Updated acroread packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Adobe Reader allows users to view and print documents in Portable Document Format (PDF).

This update fixes two security flaws in Adobe Reader. These flaws are detailed in the Adobe Security bulletin APSB13-07, listed in the References section. A specially crafted PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader when opened. (CVE-2013-0640, CVE-2013-0641)

All Adobe Reader users should install these updated packages. They contain Adobe Reader version 9.5.4, which is not vulnerable to these issues. All running instances of Adobe Reader must be restarted for the update to take effect.

The version of Adobe Reader installed on the remote Mac OS X host is prior to 11.0.2, 10.1.6, or 9.5.4. It is, therefore, affected by the following vulnerabilities :

  - An unspecified memory corruption issue exists that     allows a remote attacker to cause a denial of service or     execute arbitrary code via a crafted PDF document.
    (CVE-2013-0640)

  - An unspecified buffer overflow condition exists that     allows a remote attacker to execute arbitrary code via     a crafted PDF document. (CVE-2013-0641)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote host is earlier than 11.0.2 / 10.1.6 / 9.5.4.  It is, therefore, affected by multiple vulnerabilities :

  - An unspecified memory corruption error exists that     could lead to code execution. (CVE-2013-0640)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2013-0641)

The version of Adobe Acrobat installed on the remote host is earlier than 11.0.2 / 10.1.6 / 9.5.4.  It is, therefore, affected by multiple vulnerabilities :

  - An unspecified memory corruption error exists that     could lead to code execution. (CVE-2013-0640)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2013-0641)

ID	Name	Product	Family	Severity
74899	openSUSE Security Update : acroread (openSUSE-SU-2013:0335-2)	Nessus	SuSE Local Security Checks	high
69454	GLSA-201308-03 : Adobe Reader: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
64907	SuSE 10 Security Update : acroread (ZYPP Patch Number 8474)	Nessus	SuSE Local Security Checks	high
64905	SuSE 11.2 Security Update : acroread (SAT Patch Number 7397)	Nessus	SuSE Local Security Checks	high
64794	RHEL 5 / 6 : acroread (RHSA-2013:0551)	Nessus	Red Hat Local Security Checks	high
64787	Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSA13-02, APSB13-07) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
64786	Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)	Nessus	Windows	high
64785	Adobe Acrobat < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)	Nessus	Windows	high

Detections

Analytics

CVE-2013-0641

high

Tenable Plugins

high

critical

high

high

high

high

high

high