PT-2013-3833 · Adobe+1 · Reader+1

Publicado 2013-03-11 · Atualizado 2017-09-19 · CVE-2013-2550

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Reader version 11.0.02

Description An unspecified issue in Adobe Reader allows attackers to bypass the sandbox protection mechanism. This was demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013.

Recommendations For Adobe Reader version 11.0.02, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2013-2550

Produtos afetados

Reader

Suse

Referências · 7

• http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15992 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html · Aviso do Fabricante
• http://twitter.com/thezdi/statuses/309771882612281344 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2550 · Nota de Segurança
• http://adobe.com/support/security/bulletins/apsb13-15.html · Nota
• http://security.gentoo.org/glsa/glsa-201308-03.xml · Aviso do Fabricante