CVE-2013-3346
Adobe Reader and Acrobat Memory Corruption Vulnerability
Published Aug 30, 2013 · updated Jun 16, 2026 · adobe acrobat
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, CVE-2013-2735, CVE-2013-2736, CVE-2013-3337, CVE-2013-3338, CVE-2013-3339, CVE-2013-3340, and CVE-2013-3341.
Timeline
Detection, updates, and resolution for this record.
Aug 30, 2013 · Catalog
Detected
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, C
Mar 3, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Mar 24, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721, CVE-2013-2722, CVE-2013-2723, CVE-2013-2725, CVE-2013-2726, CVE-2013-2731, CVE-2013-2732, CVE-2013-2734, C
Required action
Apply updates per vendor instructions.
CISA due date Mar 24, 2022
Affected
- cpe adobe/acrobatversion unspecified
- cpe adobe/acrobat readerversion unspecified
- vendor Adobe Reader and Acrobatversion unspecified
Sources
- CISA KEVCVE-2013-3346
Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service.
cisa.gov - CVE.orgCVE-2013-3346
Official CVE identifier
cve.org - FIRST EPSSCVE-2013-3346
30-day exploitation probability 78.9%
first.org - Exploit Database30394
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_windows/browser/adobe_toolbutton
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - Metasploit Modulesexploit_windows/fileformat/adobe_toolbutton
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2013-3346
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, C
nvd.nist.gov