What is CVE-2013-5325?

CVE-2013-5325 is a vulnerability in Adobe Acrobat, classified under Code Injection. Published 2013-10-09.

Is CVE-2013-5325 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Adobe Acrobat

CVE-2013-5325

Adobe Reader and Acrobat 11.x before 11.0.05 on Windows allow remote attackers to execute arbitrary JavaScript code in a javascript: URL via a crafted PDF document.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.036 (88.4th percentile) — read the EPSS interpretation.

Affected products

Adobe Acrobat — versions 11.0, 11.0.1, 11.0.2
Adobe Acrobat_reader — versions 11.0, 11.0.1, 11.0.2
Microsoft Windows
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

Public proof-of-concept exploits

0xCyberY/CVE-T4PDF
ARPSyndicate/cvemon

References

psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
psirt@adobe.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2013-5325?: CVE-2013-5325 is a vulnerability in Adobe Acrobat, classified under Code Injection. Published 2013-10-09.
Is CVE-2013-5325 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.