{"schemaVersion":3,"id":"CVE-2013-2729","aliases":[],"status":"published","duplicateOf":null,"title":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","description":"Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.","dates":{"published":"2013-05-16T10:00:00.000Z","modified":"2025-11-21T15:54:37.154Z","reserved":null,"kevAdded":["2022-03-28T00:00:00.000Z"],"kevDue":["2022-04-18T00:00:00.000Z"]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.66555,"percentile":0.99282,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.66555},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.66555,"percentile":0.99282}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.66555,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.66555,"percentile":0.99282}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-28T00:00:00.000Z","dueDate":"2022-04-18T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","description":"Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2013-2729","label":"nvd.nist.gov/vuln/detail/CVE-2013-2729"}],"vendor":"Adobe","product":"Reader and Acrobat","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-28T00:00:00.000Z","dueDate":"2022-04-18T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","description":"Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2013-2729","label":"nvd.nist.gov/vuln/detail/CVE-2013-2729"}],"vendor":"Adobe","product":"Reader and Acrobat","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"26703","name":"Adobe Reader X 10.1.4.38 - '.BMP'/'.RLE' Heap Corruption","source":"exploit-database","url":"https://www.exploit-db.com/exploits/26703","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"local","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"local","platform":"windows","file":"exploits/windows/local/26703.py","codes":["CVE-2013-2729","OSVDB-93358"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"adobe","product":"acrobat","name":"Acrobat","label":"acrobat","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 9.0, < 9.5.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0, < 10.1.7","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0, < 11.0.03","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.0, < 9.5.5 | ≥ 10.0, < 10.1.7 | ≥ 11.0, < 11.0.03","eol":null,"hubHref":"/vendor/adobe/acrobat"},{"vendor":"adobe","product":"acrobat_reader","name":"acrobat reader","label":"acrobat_reader","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 9.0, < 9.5.5","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0, < 10.1.7","noFixRecorded":false,"fixedIn":null},{"text":"≥ 11.0, < 11.0.03","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.0, < 9.5.5 | ≥ 10.0, < 10.1.7 | ≥ 11.0, < 11.0.03","eol":null,"hubHref":"/vendor/adobe/acrobat_reader"},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus","name":"enterprise linux eus","label":"enterprise_linux_eus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.9","noFixRecorded":false,"fixedIn":null},{"text":"6.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.9 | 6.4","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus","name":"enterprise linux server aus","label":"enterprise_linux_server_aus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.9","noFixRecorded":false,"fixedIn":null},{"text":"6.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.9 | 6.4","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"suse","product":"linux_enterprise_desktop","name":"linux enterprise desktop","label":"linux_enterprise_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10:sp4","noFixRecorded":false,"fixedIn":null},{"text":"11:sp2","noFixRecorded":false,"fixedIn":null}],"versionsText":"10:sp4 | 11:sp2","eol":null,"hubHref":"/vendor/suse/linux_enterprise_desktop"}],"affectedCount":8,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.adobe.com/support/security/bulletins/apsb13-15.html","label":"www.adobe.com/support/security/bulletins/apsb13-15.html","hostname":"www.adobe.com","tags":["X Refsource CONFIRM","Not Applicable","Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html","label":"lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0826.html","label":"rhn.redhat.com/errata/RHSA-2013-0826.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16717","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16717","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201308-03.xml","label":"security.gentoo.org/glsa/glsa-201308-03.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2729","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2729","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]},{"url":"https://github.com/cisagov/vulnrichment/issues/199","label":"github.com/cisagov/vulnrichment/issues/199","hostname":"github.com","tags":["Issue Tracking"]}],"lineage":{"upstream":[],"downstream":["RHSA-2013:0826"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2013-05-16T10:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-03-28T00:00:00.000Z","label":"Added to CISA KEV","detail":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-04-18T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-11-21T15:54:37.154Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T15:55:29.425Z","stale":false,"partial":false}}