CVE-2013-0640

Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.

• CWE-787
• CWE-787

• http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.htmlBroken Link
• http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.htmlBroken Link
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0551.htmlThird Party Advisory
• http://security.gentoo.org/glsa/glsa-201308-03.xmlThird Party Advisory
• http://www.adobe.com/support/security/advisories/apsa13-02.htmlVendor Advisory
• http://www.adobe.com/support/security/bulletins/apsb13-07.htmlBroken Link
• http://www.kb.cert.org/vuls/id/422807Third Party Advisory, US Government Resource
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16406Broken Link
• http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.htmlBroken Link
• http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.htmlBroken Link
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00021.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00023.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00024.htmlMailing List, Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0551.htmlThird Party Advisory
• http://security.gentoo.org/glsa/glsa-201308-03.xmlThird Party Advisory
• http://www.adobe.com/support/security/advisories/apsa13-02.htmlVendor Advisory
• http://www.adobe.com/support/security/bulletins/apsb13-07.htmlBroken Link
• http://www.kb.cert.org/vuls/id/422807Third Party Advisory, US Government Resource
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16406Broken Link
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0640US Government Resource

Published

Feb 14, 2013

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0634Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.5…
• CVE-2013-0635Adobe Shockwave Player before 12.0.0.112 allows attackers to…
• CVE-2013-0636Stack-based buffer overflow in Adobe Shockwave Player before…
• CVE-2013-0637Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.6…
• CVE-2013-0638Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.6…
• CVE-2013-0639Integer overflow in Adobe Flash Player before 10.3.183.63 an…
• CVE-2013-0641Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4…7.8
• CVE-2013-0642Buffer overflow in Adobe Flash Player before 10.3.183.63 and…
• CVE-2013-0643The Firefox sandbox in Adobe Flash Player before 10.3.183.67…8.8
• CVE-2013-0644Use-after-free vulnerability in Adobe Flash Player before 10…
• CVE-2013-0645Buffer overflow in Adobe Flash Player before 10.3.183.63 and…
• CVE-2013-0646Integer overflow in Adobe Flash Player before 10.3.183.68 an…