CVE-2013-2730

CRITICAL ⚠ Exploit

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerabili...

Affects 2 products across 1 vendor.

BCS9.48
CVSS 2.010.0
EPSS78.8%
Percentile100th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
CWE Weakness Definitions
CWE-119: Improper Restriction of Operations within Memory Buffer

Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.

Related Attack Patterns (CAPEC)
CAPEC-8 Buffer Overflow in an API Call
via CWE-119
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-119
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-119
CAPEC-14 Client-side Injection-induced Buffer Overflow
via CWE-119
CAPEC-24 Filter Failure through Buffer Overflow
via CWE-119
Show all 12

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

A critical buffer overflow vulnerability exists in Adobe Reader and Acrobat versions prior to 9.5.5, 10.1.7, and 11.0.03, enabling attackers to execute arbitrary code.

BSID: BS-2013-GLOBAL-181457-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2013-2730?
A critical buffer overflow vulnerability exists in Adobe Reader and Acrobat versions prior to 9.5.5, 10.1.7, and 11.0.03, enabling attackers to execute arbitrary code.
What is the CVSS score for CVE-2013-2730?
CVE-2013-2730 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 78.8%.
Is CVE-2013-2730 actively exploited?
Public exploit available for CVE-2013-2730. Exploitation risk elevated.
How do I remediate CVE-2013-2730?
Priority: IMMEDIATE. Advisory: http://www.adobe.com/support/security/bulletins/apsb13-15.html PSIRT: [email protected]
What systems are affected by CVE-2013-2730?
CVE-2013-2730 affects: Adobe, Adobe.
Vulnerability Details
CVE IDCVE-2013-2730
BSIDBS-2013-GLOBAL-181457-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2013-05-16
Last Modified2026-04-29
ICS Relevance15%
Weakness (CWE)
Improper Restriction of Operations within Memory Buffer
SourceNVD
Official Description

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2733.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is exploited through unspecified vectors, likely involving malicious PDF files designed to trigger the buffer overflow condition.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductFixed Version
Adobe Acrobat Reader —
Adobe Acrobat —
Remediation
View Vendor Advisory →

Remediation Priority: IMMEDIATE

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: August 2026 | Threat Age: 4829 Days
CISA KEVNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
SAGE Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
Related CVEs affecting Adobe
CVE-2013-3357 10.0 Integer overflow in Adobe Reader and Acrobat before 10.1.8 and 11.x before 11... CVE-2009-3956 10.0 The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x... CVE-2013-3332 10.0 Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows... CVE-2015-3064 10.0 Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windo... CVE-2015-5101 10.0 Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 ...
View all Adobe CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →