Skip to main content

Illustrator CVE-2014-0513

CRITICAL
Buffer Overflow (CWE-119)
2014-05-14 psirt@adobe.com
10.0
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
10.0 CRITICAL
AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C

Lifecycle Timeline

1
CVE Published
May 14, 2014 - 11:13 cve.org
CRITICAL 10.0

DescriptionCVE.org

Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote attackers to execute arbitrary code via unspecified vectors.

AnalysisAI

Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote attackers to execute arbitrary code via unspecified vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote attackers to execute arbitrary code via unspecified vectors. Affected products include: Adobe Illustrator. Version information: before 16.0.5.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.

CVE-2012-0780 CRITICAL POC
10.0 May 09

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)

CVE-2012-2025 CRITICAL
10.0 May 09

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)

CVE-2012-2024 CRITICAL
10.0 May 09

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)

CVE-2012-2026 CRITICAL
10.0 May 09

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)

CVE-2012-2023 CRITICAL
10.0 May 09

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)

CVE-2012-2042 CRITICAL
10.0 May 24

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)

CVE-2021-21105 HIGH
8.8 Sep 08

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c

CVE-2021-21104 HIGH
8.8 Sep 08

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c

CVE-2021-21103 HIGH
8.8 Sep 08

Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially c

CVE-2021-21102 HIGH
8.8 Jun 28

Adobe Illustrator version 25.2 (and earlier) is affected by a Path Traversal vulnerability when parsing a specially craf

CVE-2021-21101 HIGH
8.8 Jun 28

Adobe Illustrator version 25.2 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a speciall

CVE-2026-21280 HIGH
8.6 Jan 13

Arbitrary code execution in Adobe Illustrator 29.8.3 and 30.0 through an untrusted search path vulnerability that allows

Share

CVE-2014-0513 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy