« Volver al listado

CVE-2013-0641

Estado: AnalizadaAlta (7.8)⚠ Explotación activa

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CISA KEV — explotada activamente

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Buffer overflow en PDF requiere interacción del usuario (UI:R) para abrir documento; permite ejecución de código arbitrario y acceso a datos locales en Reader/Acrobat.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Restrict Web-Based ContentPrivileged Account ManagementLimit Software InstallationExecution PreventionBehavior Prevention on EndpointDisable or Remove Feature or Program

Tecnologías afectadas (9)

Adobe — AcrobatAdobe — Acrobat ReaderOpensuse — OpensuseRedhat — Enterprise Linux DesktopRedhat — Enterprise Linux EUSRedhat — Enterprise Linux ServerRedhat — Enterprise Linux Server AUSRedhat — Enterprise Linux WorkstationSuse — Linux Enterprise Desktop

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-0641",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2013-0641",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-04T21:54:11.571273Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@adobe.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-02-14T01:55:02.070",
  "references": [
    {
      "url": "http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html",
      "tags": [
        "Broken Link"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html",
      "tags": [
        "Broken Link",
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit",
      "tags": [
        "Broken Link"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0551.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-201308-03.xml",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.adobe.com/support/security/advisories/apsa13-02.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.adobe.com/support/security/bulletins/apsb13-07.html",
      "tags": [
        "Broken Link"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/422807",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296",
      "tags": [
        "Broken Link"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html",
      "tags": [
        "Broken Link",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0551.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-201308-03.xml",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.adobe.com/support/security/advisories/apsa13-02.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.adobe.com/support/security/bulletins/apsb13-07.html",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/422807",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0641",
      "tags": [
        "US Government Resource"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en Adobe Reader y Acrobat v9.x hasta v9.5.3, 10.x hasta v10.1.5, v11.0.1 y 11.x que permite a atacantes remotos ejecutar código arbitrario a través de un documento PDF manipulado, explotado libremente en febrero de 2013, una vulnerabilidad diferente a CVE-2013-0640."
    }
  ],
  "lastModified": "2026-06-16T23:49:49.270",
  "cisaActionDue": "2022-03-24",
  "cisaExploitAdd": "2022-03-03",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EFEFA0B2-BC74-4706-8355-865FB53841EC",
              "versionEndExcluding": "9.5.4",
              "versionStartIncluding": "9.0"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E00254C1-A91A-4BF0-B166-37AE5CCAE32F",
              "versionEndExcluding": "10.1.6",
              "versionStartIncluding": "10.0"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFE7F2ED-DDCB-4DE1-A766-FADE13F249C9",
              "versionEndExcluding": "11.0.02",
              "versionStartIncluding": "11.0"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4464ED3-7FC8-43D7-B596-59AD6E4D867F",
              "versionEndExcluding": "10.1.6",
              "versionStartIncluding": "10.0"
            },
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC0644C6-8AC7-41B2-A32F-D7D5C534BD5C",
              "versionEndExcluding": "11.0.02",
              "versionStartIncluding": "11.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCCCCCC1-DC4F-4FE8-9205-35C6C12552B4",
              "versionEndExcluding": "9.5.4",
              "versionStartIncluding": "9.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:5.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6252E88C-27FF-420D-A64A-C34124CF7E6A"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A8E07B7-3739-4BEB-88F8-C7F62431E889"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:5.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92C9F1C4-55B0-426D-BB5E-01372C23AF97"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF83BB87-B203-48F9-9D06-48A5FE399050"
            },
            {
              "criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE554781-1EB9-446E-911F-6C11970C47F4"
            },
            {
              "criteria": "cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBB2C482-D2A4-48B3-ACE7-E1DFDCC409B5"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4339DE06-19FB-4B8E-B6AE-3495F605AD05"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00720D8C-3FF3-4B1C-B74B-91F01A544399"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@adobe.com",
  "cisaRequiredAction": "Apply updates per vendor instructions.",
  "cisaVulnerabilityName": "Adobe Reader Buffer Overflow Vulnerability"
}