Vulnerabilities > CVE-2013-2729 - Integer Overflow or Wraparound vulnerability in multiple products

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
adobe
suse
redhat
CWE-190
critical
nessus
exploit available

Summary

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.

Vulnerable Configurations

Part Description Count
Application
Adobe
99
OS
Suse
2
OS
Redhat
7

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

  • Forced Integer Overflow
    This attack forces an integer variable to go out of range. The integer variable is often used as an offset such as size of memory allocation or similarly. The attacker would typically control the value of such variable and try to get it out of range. For instance the integer in question is incremented past the maximum possible value, it may wrap to become a very small, or negative number, therefore providing a very incorrect value which can lead to unexpected behavior. At worst the attacker can execute arbitrary code.

Exploit-Db

descriptionAdobe Reader X 10.1.4.38 - BMP/RLE Heap Corruption. CVE-2013-2729. Local exploit for windows platform
idEDB-ID:26703
last seen2016-02-03
modified2013-07-08
published2013-07-08
reporterfeliam
sourcehttps://www.exploit-db.com/download/26703/
titleAdobe Reader X 10.1.4.38 - BMP/RLE Heap Corruption

Nessus

  • NASL familyMacOS X Local Security Checks
    NASL idMACOSX_ADOBE_READER_APSB13-15.NASL
    descriptionThe version of Adobe Reader installed on the remote Mac OS X host is prior to 11.0.3, 10.1.7, or 9.5.5. It is, therefore, affected by the following vulnerabilities : - Unspecified memory corruption issues exist that allow an attacker to execute arbitrary code. (CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3346) - An integer underflow condition exists that allows an attacker to execute arbitrary code. (CVE-2013-2549) - A use-after-free error exists that allows an attacker to bypass the Adobe Reader
    last seen2020-06-01
    modified2020-06-02
    plugin id66411
    published2013-05-14
    reporterThis script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/66411
    titleAdobe Reader < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15) (Mac OS X)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2013-0826.NASL
    descriptionUpdated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Adobe Reader allows users to view and print documents in Portable Document Format (PDF). This update fixes multiple security flaws in Adobe Reader. These flaws are detailed in the Adobe Security bulletin APSB13-15, listed in the References section. A specially crafted PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader when opened. (CVE-2013-2549, CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2724, CVE-2013-2725, CVE-2013-2726, CVE-2013-2727, CVE-2013-2729, CVE-2013-2730, CVE-2013-2731, CVE-2013-2732, CVE-2013-2733, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341) This update also fixes an information leak flaw in Adobe Reader. (CVE-2013-2737) All Adobe Reader users should install these updated packages. They contain Adobe Reader version 9.5.5, which is not vulnerable to these issues. All running instances of Adobe Reader must be restarted for the update to take effect.
    last seen2020-06-01
    modified2020-06-02
    plugin id66458
    published2013-05-16
    reporterThis script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/66458
    titleRHEL 5 / 6 : acroread (RHSA-2013:0826)
  • NASL familyGentoo Local Security Checks
    NASL idGENTOO_GLSA-201308-03.NASL
    descriptionThe remote host is affected by the vulnerability described in GLSA-201308-03 (Adobe Reader: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Adobe Reader. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially crafted PDF file, possibly resulting in arbitrary code execution or a Denial of Service condition. A local attacker could gain privileges via unspecified vectors. Workaround : There is no known workaround at this time.
    last seen2020-06-01
    modified2020-06-02
    plugin id69454
    published2013-08-23
    reporterThis script is Copyright (C) 2013-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/69454
    titleGLSA-201308-03 : Adobe Reader: Multiple vulnerabilities
  • NASL familySuSE Local Security Checks
    NASL idSUSE_ACROREAD-8571.NASL
    descriptionAcrobat Reader has been updated to version 9.5.5. The Adobe Advisory can be found at: https://www.adobe.com/support/security/bulletins/apsb13-15.html These updates resolve - memory corruption vulnerabilities that could lead to code execution. (CVE-2013-2718 / CVE-2013-2719 / CVE-2013-2720 / CVE-2013-2721 / CVE-2013-2722 / CVE-2013-2723 / CVE-2013-2725 / CVE-2013-2726 / CVE-2013-2731 / CVE-2013-2732 / CVE-2013-2734 / CVE-2013-2735 / CVE-2013-2736 / CVE-2013-3337 / CVE-2013-3338 / CVE-2013-3339 / CVE-2013-3340 / CVE-2013-3341) - an integer underflow vulnerability that could lead to code execution. (CVE-2013-2549) - a use-after-free vulnerability that could lead to a bypass of Adobe Reader
    last seen2020-06-05
    modified2013-05-19
    plugin id66506
    published2013-05-19
    reporterThis script is Copyright (C) 2013-2020 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/66506
    titleSuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 8571)
  • NASL familySuSE Local Security Checks
    NASL idSUSE_11_ACROREAD-130516.NASL
    descriptionAcrobat Reader has been updated to version 9.5.5. The Adobe Advisory can be found at: https://www.adobe.com/support/security/bulletins/apsb13-15.html These updates resolve : - memory corruption vulnerabilities that could lead to code execution. (CVE-2013-2718 / CVE-2013-2719 / CVE-2013-2720 / CVE-2013-2721 / CVE-2013-2722 / CVE-2013-2723 / CVE-2013-2725 / CVE-2013-2726 / CVE-2013-2731 / CVE-2013-2732 / CVE-2013-2734 / CVE-2013-2735 / CVE-2013-2736 / CVE-2013-3337 / CVE-2013-3338 / CVE-2013-3339 / CVE-2013-3340 / CVE-2013-3341) - an integer underflow vulnerability that could lead to code execution. (CVE-2013-2549) - a use-after-free vulnerability that could lead to a bypass of Adobe Reader
    last seen2020-06-05
    modified2013-05-19
    plugin id66505
    published2013-05-19
    reporterThis script is Copyright (C) 2013-2020 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/66505
    titleSuSE 11.2 Security Update : Acrobat Reader (SAT Patch Number 7734)
  • NASL familyWindows
    NASL idADOBE_ACROBAT_APSB13-15.NASL
    descriptionThe version of Adobe Acrobat installed on the remote host is earlier than 11.0.3 / 10.1.7 / 9.5.5. It is, therefore, affected by multiple vulnerabilities : - Unspecified memory corruption vulnerabilities exist that could lead to code execution. (CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3346) - An integer underflow error exists that could lead to code execution. (CVE-2013-2549) - A use-after-free error exists that could lead to a bypass of Adobe Reader
    last seen2020-06-01
    modified2020-06-02
    plugin id66409
    published2013-05-14
    reporterThis script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/66409
    titleAdobe Acrobat < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15)
  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2013-437.NASL
    descriptionAcroread was updated to 9.5.5 for bnc#819918(swampid#52449). More information can be found on: https://www.adobe.com/support/security/bulletins/apsb13-15.html (CVE-2013-2549, CVE-2013-2550, CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2724, CVE-2013-2725, CVE-2013-2726, CVE-2013-2727, CVE-2013-2729, CVE-2013-2730, CVE-2013-2731, CVE-2013-2732, CVE-2013-2733, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-2737, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3342)
    last seen2020-06-05
    modified2014-06-13
    plugin id75008
    published2014-06-13
    reporterThis script is Copyright (C) 2014-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/75008
    titleopenSUSE Security Update : acroread (openSUSE-SU-2013:0990-1)
  • NASL familyWindows
    NASL idADOBE_READER_APSB13-15.NASL
    descriptionThe version of Adobe Reader installed on the remote host is earlier than 11.0.3 / 10.1.7 / 9.5.5. It is, therefore, affected by multiple vulnerabilities : - Unspecified memory corruption vulnerabilities exist that could lead to code execution. (CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, CVE-2013-3341, CVE-2013-3346) - An integer underflow error exists that could lead to code execution. (CVE-2013-2549) - A use-after-free error exists that could lead to a bypass of Adobe Reader
    last seen2020-06-01
    modified2020-06-02
    plugin id66410
    published2013-05-14
    reporterThis script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/66410
    titleAdobe Reader < 11.0.3 / 10.1.7 / 9.5.5 Multiple Vulnerabilities (APSB13-15)

Oval

accepted2013-07-08T04:01:53.710-04:00
classvulnerability
contributors
nameShane Shaffer
organizationG2, Inc.
definition_extensions
  • commentAdobe Reader 9 Series is installed
    ovaloval:org.mitre.oval:def:6523
  • commentAdobe Reader 10.x is installed
    ovaloval:org.mitre.oval:def:12283
  • commentAdobe Reader 11.x is installed
    ovaloval:org.mitre.oval:def:16400
  • commentAdobe Acrobat 9 Series is installed
    ovaloval:org.mitre.oval:def:6013
  • commentAdobe Acrobat 10.x is installed
    ovaloval:org.mitre.oval:def:11989
  • commentAdobe Acrobat 11.x is installed
    ovaloval:org.mitre.oval:def:16409
descriptionInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.
familywindows
idoval:org.mitre.oval:def:16717
statusaccepted
submitted2013-05-28T14:52:25.778-04:00
titleInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727
version5

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/122309/adobereaderx-heap.txt
idPACKETSTORM:122309
last seen2016-12-05
published2013-07-08
reporterfeliam
sourcehttps://packetstormsecurity.com/files/122309/Adobe-Reader-X-10.1.4.38-BMP-RLE-Heap-Corruption.html
titleAdobe Reader X 10.1.4.38 BMP/RLE Heap Corruption

Redhat

advisories
rhsa
idRHSA-2013:0826
rpms
  • acroread-0:9.5.5-1.el5_9
  • acroread-0:9.5.5-1.el6_4
  • acroread-plugin-0:9.5.5-1.el5_9
  • acroread-plugin-0:9.5.5-1.el6_4