CVE-2013-2730

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 79%

from disclosure to weapon0 days

Published on NVDMay 16

1st PoCMay 15

metasploitMay 14

exploitation probability

79%top 1% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2733.

Affected products

n/a · n/a

public PoCs found — 2

githubgithub.com/feliam/CVE-2013-2730★ 10 exploitdbwww.exploit-db.com/exploits/25725unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html http://rhn.redhat.com/errata/RHSA-2013-0826.html http://security.gentoo.org/glsa/glsa-201308-03.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16631 http://www.adobe.com/support/security/bulletins/apsb13-15.html http://www.securityfocus.com/bid/59923