CVE-2013-2729

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

An integer overflow vulnerability, tracked as CVE-2013-2729 and assigned CWE-190, affects Adobe Reader and Acrobat versions 9.x prior to 9.5.5, 10.x prior to 10.1.7, and 11.x prior to 11.0.03. The flaw permits arbitrary code execution through unspecified vectors and is distinct from the related issue CVE-2013-2727. It carries a CVSS 3.1 base score of 9.8, reflecting network attack vectors that require no authentication or user interaction.

Remote attackers can exploit the condition to execute arbitrary code on affected systems, resulting in full compromise of confidentiality, integrity, and availability. The high severity stems from the ability to trigger the overflow without local access or elevated privileges, enabling direct impact on any exposed installation that processes malicious input.

Adobe security bulletin APSB13-15 and corresponding vendor advisories, including Red Hat RHSA-2013-0826, openSUSE and Gentoo updates, and OVAL definitions, address mitigation through application of the listed patches that update the affected Reader and Acrobat releases to the fixed versions. Organizations are advised to apply these updates promptly to eliminate the vulnerable code paths.