Patch Tuesday, February 2013
Microsoft's monthly security release, Tuesday, February 12, 2013. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
0 CVEs · 0 critical · 0 exploited · 0 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
No tracked Microsoft CVEs in this window. Vendors sometimes publish a day or two later.
Adobe
2 CVEs · 0 critical · 2 exploited · 1 with public exploit code
- 7.8HighFeb 14, 2013Adobe Reader and Acrobat Memory corruptionCVE-2013-0640An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.Exploited87% likelyExploit codeExploit-DB
- 7.8HighFeb 14, 2013Adobe Reader Memory corruptionCVE-2013-0641A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.Exploited32% likely
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.