جزئیات آسیب‌پذیری

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

• http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html x_refsource_CONFIRM
• http://www.kb.cert.org/vuls/id/422807 third-party-advisoryx_refsource_CERT-VN
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.html vendor-advisoryx_refsource_SUSE
• http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html x_refsource_MISC
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.html vendor-advisoryx_refsource_SUSE
• http://rhn.redhat.com/errata/RHSA-2013-0551.html vendor-advisoryx_refsource_REDHAT
• http://www.adobe.com/support/security/bulletins/apsb13-07.html x_refsource_CONFIRM
• http://blogs.mcafee.com/mcafee-labs/digging-into-the-sandbox-escape-technique-of-the-recent-pdf-exploit x_refsource_MISC
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.html vendor-advisoryx_refsource_SUSE
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16296 vdb-entrysignaturex_refsource_OVAL
• http://www.adobe.com/support/security/advisories/apsa13-02.html x_refsource_CONFIRM
• http://security.gentoo.org/glsa/glsa-201308-03.xml vendor-advisoryx_refsource_GENTOO
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0641 government-resource