CVE-2013-0113

Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…

published February 24, 2013

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

⚠️ Watch out for those PDFs! A crafted document can lead to remote code execution or a denial of service in Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1. 😱 Think of it like a restaurant menu that secretly includes an ingredient nobody ordered. If the kitchen follows those instructions, it could lead to a big mess, or worse, a health hazard. In this case, opening a malicious PDF could have the same disastrous effect on your system! An attacker could unleash chaos by executing arbitrary code, potentially gaining control over your system. Alternatively, it could simply crash the application, leading to a denial of service that disrupts your workflow and productivity. It's a sneaky way for trouble to come knocking!

Put simply

Think of it like a restaurant menu that secretly includes an ingredient nobody ordered. If the kitchen follows those instructions, it could lead to a big mess, or worse, a health hazard. In this case, opening a malicious PDF could have the same disastrous effect on your system! This vulnerability allows attackers to exploit memory corruption in Nuance PDF Reader and PDF Viewer Plus through a specially crafted PDF document, which could lead to arbitrary code execution or application crashes.

What to do

An attacker could unleash chaos by executing arbitrary code, potentially gaining control over your system. Alternatively, it could simply crash the application, leading to a denial of service that disrupts your workflow and productivity. It's a sneaky way for trouble to come knocking! Make sure to patch to the latest version of Nuance PDF Reader and PDF Viewer Plus to shield against this vulnerability. Additionally, consider using alternative PDF readers that are regularly updated and have strong security measures in place. Don't forget to educate your team about the dangers of opening suspicious PDF files! You've got this! By staying informed and proactive, you can keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03220 · 88.1th percentile
Published
2013-02-24T11:00Z
EPSS history
Timeline
  • 24 FEB 11:00Z
    Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…
    cvelistv5