PT-2013-3833 · Adobe+1 · Reader+1

Published 2013-03-11 · Updated 2017-09-19 · CVE-2013-2550

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Reader version 11.0.02

Description An unspecified issue in Adobe Reader allows attackers to bypass the sandbox protection mechanism. This was demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013.

Recommendations For Adobe Reader version 11.0.02, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2013-2550

Affected Products

Reader

Suse

References · 7

• http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2550 · Security Note
• http://security.gentoo.org/glsa/glsa-201308-03.xml · Vendor Advisory
• http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15992 · Note
• http://twitter.com/thezdi/statuses/309771882612281344 · Note
• http://adobe.com/support/security/bulletins/apsb13-15.html · Note