What’s Vulnerable › Vulnerabilities

CVE-2013-5325

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-10-09 · updated 2026-06-16
• Weakness: CWE-94

Description

Adobe Reader and Acrobat 11.x before 11.0.05 on Windows allow remote attackers to execute arbitrary JavaScript code in a javascript: URL via a crafted PDF document.

Affected products

• Adobe Acrobat for Edge: 11.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4
• Adobe Acrobat Reader: 11.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4

References

• http://www.adobe.com/support/security/bulletins/apsb13-25.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19053
• http://www.adobe.com/support/security/bulletins/apsb13-25.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19053

Get alerted when CVE-2013-5325 or the next vulnerability affects your stack