Vulnerabilities > CVE-2013-2729 - Integer Overflow or Wraparound vulnerability in multiple products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

critical

nessus

exploit available

NVD

Published: 2013-05-16

Updated: 2024-07-09

Summary

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Acrobat Reader 9.0 Adobe Acrobat Reader 9.1 Adobe Acrobat Reader 9.1.1 Adobe Acrobat Reader 9.1.2 Adobe Acrobat Reader 9.1.3 Adobe Acrobat Reader 9.2 Adobe Acrobat Reader 9.3 Adobe Acrobat Reader 9.3.1 Adobe Acrobat Reader 9.3.2 Adobe Acrobat Reader 9.3.3 Adobe Acrobat Reader 9.3.4 Adobe Acrobat Reader 9.4 Adobe Acrobat Reader 9.4.1 Adobe Acrobat Reader 9.4.2 Adobe Acrobat Reader 9.4.3 Adobe Acrobat Reader 9.4.4 Adobe Acrobat Reader 9.4.5 Adobe Acrobat Reader 9.4.6 Adobe Acrobat Reader 9.4.7 Adobe Acrobat Reader 9.5 Adobe Acrobat Reader 9.5.1 Adobe Acrobat Reader 9.5.2 Adobe Acrobat Reader 9.5.3 Adobe Acrobat Reader 9.5.4 Adobe Acrobat Reader 11.0 Adobe Acrobat Reader 11.0.0 Adobe Acrobat Reader 11.0.01 Adobe Acrobat Reader 11.0.1 Adobe Acrobat Reader 11.0.02 Adobe Acrobat Reader 11.0.2 Adobe Acrobat Reader 10.0 Adobe Acrobat Reader 10.0.1 Adobe Acrobat Reader 10.0.2 Adobe Acrobat Reader 10.0.3 Adobe Acrobat Reader 10.1 Adobe Acrobat Reader 10.1.0 Adobe Acrobat Reader 10.1.1 Adobe Acrobat Reader 10.1.2 Adobe Acrobat Reader 10.1.3 Adobe Acrobat Reader 10.1.4 Adobe Acrobat Reader 10.1.5 Adobe Acrobat Reader 10.1.6 Adobe Acrobat 10.0 Adobe Acrobat 10.0.1 Adobe Acrobat 10.0.2 Adobe Acrobat 10.0.3 Adobe Acrobat 10.1 Adobe Acrobat 10.1.0 Adobe Acrobat 10.1.1 Adobe Acrobat 10.1.2 Adobe Acrobat 10.1.3 Adobe Acrobat 10.1.4 Adobe Acrobat 10.1.5 Adobe Acrobat 10.1.6 Adobe Acrobat 11.0 Adobe Acrobat 11.0.0 Adobe Acrobat 11.0.1 Adobe Acrobat 11.0.2 Adobe Acrobat 9.0 Adobe Acrobat 9.1 Adobe Acrobat 9.1.1 Adobe Acrobat 9.1.2 Adobe Acrobat 9.1.3 Adobe Acrobat 9.2 Adobe Acrobat 9.3 Adobe Acrobat 9.3.1 Adobe Acrobat 9.3.2 Adobe Acrobat 9.3.3 Adobe Acrobat 9.3.4 Adobe Acrobat 9.4 Adobe Acrobat 9.4.1 Adobe Acrobat 9.4.2 Adobe Acrobat 9.4.3 Adobe Acrobat 9.4.4 Adobe Acrobat 9.4.5 Adobe Acrobat 9.4.6 Adobe Acrobat 9.4.7 Adobe Acrobat 9.5 Adobe Acrobat 9.5.1 Adobe Acrobat 9.5.2 Adobe Acrobat 9.5.3 Adobe Acrobat 9.5.4	99
OS	Suse Suse Linux Enterprise Desktop 11 Suse Linux Enterprise Desktop 10	2
OS	Redhat Redhat Enterprise Linux Server AUS 6.4 Redhat Enterprise Linux Server AUS 5.9 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0 Redhat Enterprise Linux EUS 5.9 Redhat Enterprise Linux EUS 6.4	7

Common Weakness Enumeration (CWE)

CWE-190 - Integer Overflow or Wraparound

Common Attack Pattern Enumeration and Classification (CAPEC)

Forced Integer Overflow
This attack forces an integer variable to go out of range. The integer variable is often used as an offset such as size of memory allocation or similarly. The attacker would typically control the value of such variable and try to get it out of range. For instance the integer in question is incremented past the maximum possible value, it may wrap to become a very small, or negative number, therefore providing a very incorrect value which can lead to unexpected behavior. At worst the attacker can execute arbitrary code.

Exploit-Db

description	Adobe Reader X 10.1.4.38 - BMP/RLE Heap Corruption. CVE-2013-2729. Local exploit for windows platform
id	EDB-ID:26703
last seen	2016-02-03
modified	2013-07-08
published	2013-07-08
reporter	feliam
source	https://www.exploit-db.com/download/26703/
title	Adobe Reader X 10.1.4.38 - BMP/RLE Heap Corruption

Nessus

NASL family	MacOS X Local Security Checks
NASL id	MACOSX_ADOBE_READER_APSB13-15.NASL
description	The version of Adobe Reader installed on the remote Mac OS X host is prior to 11.0.3, 10.1.7, or 9.5.5. It is, therefore, affected by the following vulnerabilities : - Unspecified memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3346) - An integer underflow condition exists that allows an attacker to execute arbitrary code. (CVE-2013-2549) - A use-after-free error exists that allows an attacker to bypass the Adobe Reader
last seen	2020-06-01
modified	2020-06-02
plugin id	66411
published	2013-05-14
reporter	This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/66411
title	Adobe Reader < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15) (Mac OS X)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2013-0826.NASL
description	Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Adobe Reader allows users to view and print documents in Portable Document Format (PDF). This update fixes multiple security flaws in Adobe Reader. These flaws are detailed in the Adobe Security bulletin APSB13-15, listed in the References section. A specially crafted PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader when opened. (CVE-2013-2549, CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2724, CVE-2013-2725, CVE-2013-2726, CVE-2013-2727, CVE-2013-2729, CVE-2013-2730, CVE-2013-2731, CVE-2013-2732, CVE-2013-2733, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341) This update also fixes an information leak flaw in Adobe Reader. (CVE-2013-2737) All Adobe Reader users should install these updated packages. They contain Adobe Reader version 9.5.5, which is not vulnerable to these issues. All running instances of Adobe Reader must be restarted for the update to take effect.
last seen	2020-06-01
modified	2020-06-02
plugin id	66458
published	2013-05-16
reporter	This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/66458
title	RHEL 5 / 6 : acroread (RHSA-2013:0826)

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-201308-03.NASL
description	The remote host is affected by the vulnerability described in GLSA-201308-03 (Adobe Reader: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Adobe Reader. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially crafted PDF file, possibly resulting in arbitrary code execution or a Denial of Service condition. A local attacker could gain privileges via unspecified vectors. Workaround : There is no known workaround at this time.
last seen	2020-06-01
modified	2020-06-02
plugin id	69454
published	2013-08-23
reporter	This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/69454
title	GLSA-201308-03 : Adobe Reader: Multiple vulnerabilities

NASL family	SuSE Local Security Checks
NASL id	SUSE_ACROREAD-8571.NASL
description	Acrobat Reader has been updated to version 9.5.5. The Adobe Advisory can be found at: https://www.adobe.com/support/security/bulletins/apsb13-15.html These updates resolve - memory corruption vulnerabilities that could lead to code execution. (CVE-2013-2718 / CVE-2013-2719 / CVE-2013-2720 / CVE-2013-2721 / CVE-2013-2722 / CVE-2013-2723 / CVE-2013-2725 / CVE-2013-2726 / CVE-2013-2731 / CVE-2013-2732 / CVE-2013-2734 / CVE-2013-2735 / CVE-2013-2736 / CVE-2013-3337 / CVE-2013-3338 / CVE-2013-3339 / CVE-2013-3340 / CVE-2013-3341) - an integer underflow vulnerability that could lead to code execution. (CVE-2013-2549) - a use-after-free vulnerability that could lead to a bypass of Adobe Reader
last seen	2020-06-05
modified	2013-05-19
plugin id	66506
published	2013-05-19
reporter	This script is Copyright (C) 2013-2020 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/66506
title	SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 8571)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_ACROREAD-130516.NASL
description	Acrobat Reader has been updated to version 9.5.5. The Adobe Advisory can be found at: https://www.adobe.com/support/security/bulletins/apsb13-15.html These updates resolve : - memory corruption vulnerabilities that could lead to code execution. (CVE-2013-2718 / CVE-2013-2719 / CVE-2013-2720 / CVE-2013-2721 / CVE-2013-2722 / CVE-2013-2723 / CVE-2013-2725 / CVE-2013-2726 / CVE-2013-2731 / CVE-2013-2732 / CVE-2013-2734 / CVE-2013-2735 / CVE-2013-2736 / CVE-2013-3337 / CVE-2013-3338 / CVE-2013-3339 / CVE-2013-3340 / CVE-2013-3341) - an integer underflow vulnerability that could lead to code execution. (CVE-2013-2549) - a use-after-free vulnerability that could lead to a bypass of Adobe Reader
last seen	2020-06-05
modified	2013-05-19
plugin id	66505
published	2013-05-19
reporter	This script is Copyright (C) 2013-2020 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/66505
title	SuSE 11.2 Security Update : Acrobat Reader (SAT Patch Number 7734)

NASL family	Windows
NASL id	ADOBE_ACROBAT_APSB13-15.NASL
description	The version of Adobe Acrobat installed on the remote host is earlier than 11.0.3 / 10.1.7 / 9.5.5. It is, therefore, affected by multiple vulnerabilities : - Unspecified memory corruption vulnerabilities exist that could lead to code execution. (CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3346) - An integer underflow error exists that could lead to code execution. (CVE-2013-2549) - A use-after-free error exists that could lead to a bypass of Adobe Reader
last seen	2020-06-01
modified	2020-06-02
plugin id	66409
published	2013-05-14
reporter	This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/66409
title	Adobe Acrobat < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15)

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2013-437.NASL
description	Acroread was updated to 9.5.5 for bnc#819918(swampid#52449). More information can be found on: https://www.adobe.com/support/security/bulletins/apsb13-15.html (CVE-2013-2549, CVE-2013-2550, CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2724, CVE-2013-2725, CVE-2013-2726, CVE-2013-2727, CVE-2013-2729, CVE-2013-2730, CVE-2013-2731, CVE-2013-2732, CVE-2013-2733, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-2737, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3342)
last seen	2020-06-05
modified	2014-06-13
plugin id	75008
published	2014-06-13
reporter	This script is Copyright (C) 2014-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/75008
title	openSUSE Security Update : acroread (openSUSE-SU-2013:0990-1)

NASL family	Windows
NASL id	ADOBE_READER_APSB13-15.NASL
description	The version of Adobe Reader installed on the remote host is earlier than 11.0.3 / 10.1.7 / 9.5.5. It is, therefore, affected by multiple vulnerabilities : - Unspecified memory corruption vulnerabilities exist that could lead to code execution. (CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3346) - An integer underflow error exists that could lead to code execution. (CVE-2013-2549) - A use-after-free error exists that could lead to a bypass of Adobe Reader
last seen	2020-06-01
modified	2020-06-02
plugin id	66410
published	2013-05-14
reporter	This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/66410
title	Adobe Reader < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15)

Oval

accepted

2013-07-08T04:01:53.710-04:00

class

vulnerability

contributors

name	Shane Shaffer
organization	G2, Inc.

definition_extensions

comment Adobe Reader 9 Series is installed
oval oval:org.mitre.oval:def:6523
comment Adobe Reader 10.x is installed
oval oval:org.mitre.oval:def:12283
comment Adobe Reader 11.x is installed
oval oval:org.mitre.oval:def:16400
comment Adobe Acrobat 9 Series is installed
oval oval:org.mitre.oval:def:6013
comment Adobe Acrobat 10.x is installed
oval oval:org.mitre.oval:def:11989
comment Adobe Acrobat 11.x is installed
oval oval:org.mitre.oval:def:16409

description

family

windows

oval:org.mitre.oval:def:16717

status

accepted

submitted

2013-05-28T14:52:25.778-04:00

title

version

Packetstorm

data source	https://packetstormsecurity.com/files/download/122309/adobereaderx-heap.txt
id	PACKETSTORM:122309
last seen	2016-12-05
published	2013-07-08
reporter	feliam
source	https://packetstormsecurity.com/files/122309/Adobe-Reader-X-10.1.4.38-BMP-RLE-Heap-Corruption.html
title	Adobe Reader X 10.1.4.38 BMP/RLE Heap Corruption

Redhat

advisories

rhsa

id	RHSA-2013:0826

rpms

acroread-0:9.5.5-1.el5_9
acroread-0:9.5.5-1.el6_4
acroread-plugin-0:9.5.5-1.el5_9
acroread-plugin-0:9.5.5-1.el6_4

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Exploit-Db

Nessus

Oval

Packetstorm

Redhat

References