Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

acroread was updated to 9.5.4 to fix remote code execution problems.
(CVE-2013-0640, CVE-2013-0641)

More information can be found on:
&#9;http://www.adobe.com/support/security/bulletins/apsb13-07.html

The remote host is affected by the vulnerability described in GLSA-201308-03 (Adobe Reader: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Reader. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF       file, possibly resulting in arbitrary code execution or a Denial of       Service condition. A local attacker could gain privileges via unspecified       vectors.
  Workaround :

    There is no known workaround at this time.

Acrobat Reader was updated to 9.5.4 which fixes two critical security issues where attackers supplying PDFs could have caused code execution with acrobat. (CVE-2013-0640 / CVE-2013-0641)

More information can be found on :

https://www.adobe.com/support/security/bulletins/apsb13-07.html

Acrobat Reader has been updated to 9.5.4 which fixes two critical security issues where attackers supplying PDFs could have caused code execution with acrobat. (CVE-2013-0640 / CVE-2013-0641)

More information can be found on :

https://www.adobe.com/support/security/bulletins/apsb13-07.html

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0551 advisory.

    Adobe Reader allows users to view and print documents in Portable Document     Format (PDF).

    This update fixes two security flaws in Adobe Reader. These flaws are     detailed in the Adobe Security bulletin APSB13-07, listed in the References     section. A specially-crafted PDF file could cause Adobe Reader to crash or,     potentially, execute arbitrary code as the user running Adobe Reader when     opened. (CVE-2013-0640, CVE-2013-0641)

    All Adobe Reader users should install these updated packages. They contain     Adobe Reader version 9.5.4, which is not vulnerable to these issues. All     running instances of Adobe Reader must be restarted for the update to take     effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote Mac OS X host is prior to 11.0.2, 10.1.6, or 9.5.4. It is, therefore, affected by the following vulnerabilities :

  - An unspecified memory corruption issue exists that     allows a remote attacker to cause a denial of service or     execute arbitrary code via a crafted PDF document.
    (CVE-2013-0640)

  - An unspecified buffer overflow condition exists that     allows a remote attacker to execute arbitrary code via     a crafted PDF document. (CVE-2013-0641)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Reader installed on the remote host is earlier than 11.0.2 / 10.1.6 / 9.5.4.  It is, therefore, affected by multiple vulnerabilities :

  - An unspecified memory corruption error exists that     could lead to code execution. (CVE-2013-0640)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2013-0641)

The version of Adobe Acrobat installed on the remote host is earlier than 11.0.2 / 10.1.6 / 9.5.4.  It is, therefore, affected by multiple vulnerabilities :

  - An unspecified memory corruption error exists that     could lead to code execution. (CVE-2013-0640)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2013-0641)

ID	Name	Product	Family	Severity
74899	openSUSE Security Update : acroread (openSUSE-SU-2013:0335-2)	Nessus	SuSE Local Security Checks	high
69454	GLSA-201308-03 : Adobe Reader: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
64907	SuSE 10 Security Update : acroread (ZYPP Patch Number 8474)	Nessus	SuSE Local Security Checks	high
64905	SuSE 11.2 Security Update : acroread (SAT Patch Number 7397)	Nessus	SuSE Local Security Checks	high
64794	RHEL 5 / 6 : acroread (RHSA-2013:0551)	Nessus	Red Hat Local Security Checks	high
64787	Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSA13-02, APSB13-07) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
64786	Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)	Nessus	Windows	high
64785	Adobe Acrobat < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)	Nessus	Windows	high

Detections

Analytics

CVE-2013-0641

high

Tenable Plugins

high

critical

high

high

high

high

high

high