CVE-2013-2549
Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary...
CVE-2013-2549 is a high vulnerability (CVSS 7.5) in Adobe Acrobat Reader, published March 11, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.42%, the 93rd percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 6.42%EPSS, 93rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary code via vectors related to a "break into the sandbox," as demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
acroreadRed Hat:rhel_extras:5::server From an advisory covering 26 CVEs | before 0:9.5.5-1.el5_9 | 0:9.5.5-1.el5_9 |
acroread-pluginRed Hat:rhel_extras:5::server From an advisory covering 26 CVEs | before 0:9.5.5-1.el5_9 | 0:9.5.5-1.el5_9 |
acroreadRed Hat:rhel_extras:6 From an advisory covering 26 CVEs | before 0:9.5.5-1.el6_4 | 0:9.5.5-1.el6_4 |
acroread-pluginRed Hat:rhel_extras:6 From an advisory covering 26 CVEs | before 0:9.5.5-1.el6_4 | 0:9.5.5-1.el6_4 |
What each source reports
NVD Score used
Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary code via vectors related to a "break into the sandbox," as demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013.
- Record
CVE-2013-2549- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary code via vectors related to a "break into the sandbox," as demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013.
- Record
CVE-2013-2549- Updated
- 2026-11-02
EUVDEUVD-2013-2491No score
Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary code via vectors related to a "break into the sandbox," as demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013.
- Record
EUVD-2013-2491- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f39f-hvgr-fwwxNo score
Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary...
Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary code via vectors related to a "break into the sandbox," as demonstrated by George Hotz during a Pwn2Own competition at CanSecWest 2013.
- Record
GHSA-f39f-hvgr-fwwx- Weakness
- CWE-94
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
twitter.com/thezdi/statuses/309771882612281344
adobe.com/support/security/bulletins/apsb13-15.html
lists.opensuse.org/opensuse-security-announce/2013-05/msg00004.html
rhn.redhat.com/errata/RHSA-2013-0826.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16809
h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157
Show 87 moreShow less
security.gentoo.org/glsa/glsa-201308-03.xml
nvd.nist.gov/vuln/detail/CVE-2013-2549
github.com/advisories/GHSA-f39f-hvgr-fwwx
access.redhat.com/errata/RHSA-2013:0826
bugzilla.redhat.com/show_bug.cgi?id=920180
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0826.json
cve.org/CVERecord?id=CVE-2013-2549
cisa.gov/known-exploited-vulnerabilities-catalog