{"id":"CVE-2013-0640","kind":"vulnerability","aliases":["CVE-2013-0640"],"related":[],"title":"Adobe Reader and Acrobat: Adobe Reader and Acrobat Memory Corruption Vulnerability","description":"Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.","summary":"Adobe Reader and Acrobat have a memory corruption flaw in acroform.dll that lets a crafted PDF run code on the machine that opens it. Attackers are exploiting it in the wild, per CISA's Known Exploited Vulnerabilities list.","severity":"critical","cvss":9.3,"epss":0.86927,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Adobe Reader and Acrobat","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["acrobat","adobe-reader","desktop","exploited","package","windows"],"not_affected_if":["no-adobe-reader-installed","patched-version"],"how_to_check":"Open Adobe Reader or Acrobat and check Help > About for the version; compare it with the vendor's fixed release.","fix":"Update Adobe Reader or Acrobat to a version the vendor lists as fixed for CVE-2013-0640.","status":"open","published_at":"2013-02-14T01:55:02+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:26:11+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-23T21:26:11Z","model":"claude-haiku-5-5","output":{"fix":"Update Adobe Reader or Acrobat to a version the vendor lists as fixed for CVE-2013-0640.\nunknown","reach":"internet","impact":"high","summary":"Adobe Reader and Acrobat have a memory corruption flaw in acroform.dll that lets a crafted PDF run code on the machine that opens it. Attackers are exploiting it in the wild, per CISA's Known Exploited Vulnerabilities list.","category":"package","who_cares":["adobe-reader","acrobat","windows","desktop"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs code on the victim's machine via a malicious PDF","analyst_note":"Sources do not list affected or fixed versions or a check command; confirm fixed versions from Adobe's security bulletin for CVE-2013-0640.","how_to_check":"Open Adobe Reader or Acrobat and check Help > About for the version; compare it with the vendor's fixed release.\nunknown","needs_analyst":true,"not_affected_if":["patched-version","no-adobe-reader-installed"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000492,"input_tokens":2837,"output_tokens":416,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0640':14A,17A '-2013':13A,16A '10':76C '10.1.6':79C '11':81C '11.0.02':84C '2013':112C '9':72C '9.5.4':75C 'acrobat':4A,8A,21A,22B,33B,71C 'acroform.dll':40B 'adob':1A,5A,24B,30B,68C 'adobe':18A 'adobe-read':23B 'allow':85C 'and':20A 'arbitrari':90C 'attack':54B,87C 'caus':93C 'cisa':62B 'code':47B,91C 'corrupt':10A,37B,99C 'craft':44B,102C 'cve':12A,15A 'denial':95C 'desktop':26B 'document':104C 'execut':89C 'exploit':27B,56B,65B,106C 'februari':111C 'flaw':38B 'known':64B 'let':42B 'list':67B 'machin':50B 'memori':9A,36B,98C 'open':52B 'packag':28B 'pdf':45B,103C 'per':61B 'reader':2A,6A,19A,25B,31B,69C 'remot':86C 'run':46B 'servic':97C 'via':100C 'vulner':11A,66B 'wild':60B,109C 'window':29B 'x':73C,77C,82C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2013-02-14T01:55:02+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2013-0640","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-0640","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T16:39:49+00:00","note":null},{"source":"epss","external_id":"CVE-2013-0640","url":"https://api.first.org/data/v1/epss?cve=CVE-2013-0640","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2013-0640","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0640","severity":null,"published_at":"2013-02-14T01:55:02+00:00","modified_at":"2026-06-16T23:49:49+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}