Adobe · Reader and Acrobat
CVE-2013-3346
Adobe Reader and Acrobat Memory Corruption Vulnerability
무엇인가
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.
CISA: Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.
할 일
Apply updates per vendor instructions.
미국 연방 기관 조치 기한: 2022년 3월 24일
Adobe의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2022. 6. 8. | Universal 3D Memory Corruption | Reader and Acrobat | 높음 8.8 | 89% |
| 2022. 5. 25. | Sandbox Bypass | Reader and Acrobat | 높음 8.8 | 22% |
| 2022. 3. 28. | Arbitrary Integer Overflow | Reader and Acrobat | 높음 8.8 | 67% |
| 2022. 3. 25. | Reader and Adobe Acrobat Stack-Based Buffer Overflow | Reader and Acrobat | 높음 8.8 | 97% |
| 2022. 3. 3. | Arbitrary Code Execution | Reader and Acrobat | 높음 7.8 | 88% |
| 2022. 3. 3. | Memory Corruption | Reader and Acrobat | 높음 7.8 | 87% |
| 2022. 3. 3. | Use-After-Free | Reader and Acrobat | 높음 8.8 | 40% |
| 2026. 10. 27. | Unrestricted Upload of File with Dangerous Type | Commerce and Magento | 치명적 9.3 | 31% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.