VIR Vulnerability Intelligence Relay

CVE-2013-0732

critical
Published 2014-03-27 · Modified 2026-05-06
CVSS v3
—
CVSS v2
9.3
VIR risk
9.3

Description

Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in a TTF file, related to naming table entries.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: PSIRT-CNA@flexerasoftware.com — http://secunia.com/advisories/51943

Application impact
VendorProductVersionsFixed
nuancepdf_reader{"endIncluding":"7.0"}
nuancepdf_reader6.0

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.