# CVE-2013-2729: Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability

Source: https://junglewise.ai/threats/cve-2013-2729-adobe-reader-and-acrobat-arbitrary-integer-overflow-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2022-03-28. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-2013-2729 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2022-03-28

An integer overflow vulnerability in Adobe Reader and Acrobat 9.x, 10.x, and 11.x allows remote attackers to execute arbitrary code via unspecified vectors. This vulnerability has been observed being exploited in the wild.

Technologies: [Adobe Acrobat](https://junglewise.ai/threats/technologies/acrobat), [Adobe AIR](https://junglewise.ai/threats/technologies/air), [Adobe Flash Player](https://junglewise.ai/threats/technologies/flash-player), [Adobe Reader](https://junglewise.ai/threats/technologies/reader). Vendors: [Adobe](https://junglewise.ai/threats/vendors/adobe).

## Quick answers

**Is CVE-2013-2729 exploited in the wild?** Yes. CVE-2013-2729 is known to be exploited in the wild, first recorded on 28 March 2022. Treat it as urgent.

**How severe is CVE-2013-2729?** Critical severity, with a CVSS score of 9.8, published 28 March 2022.

**Which products and versions are affected?** Adobe Acrobat 9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03; Adobe Reader 9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03.

**Is there a fix for CVE-2013-2729?** A patch was published on 2013-05-14: Adobe released APSB13-15 to address the vulnerability. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2013-2729 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2013-2729?** Check whether you run Adobe Acrobat, Adobe AIR, Adobe Flash Player or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Adobe Acrobat 9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03
- Adobe Reader 9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03

## Timeline

- 2013-05-14: patched: Adobe released APSB13-15 to address the vulnerability.
- 2022-03-28: kev added: Added to CISA's Known Exploited Vulnerabilities Catalog.

## Related threats

- [Adobe Acrobat Reader denial-of-service via uncontrolled resource consumption](https://junglewise.ai/threats/cve-2026-82001-adobe-acrobat-reader-denial-of-service-via-uncontrolled-resource)
- [Adobe Acrobat Reader privilege escalation via incorrect authorization](https://junglewise.ai/threats/cve-2026-81996-adobe-acrobat-reader-privilege-escalation-via-incorrect)
- [Adobe Acrobat Reader prototype pollution arbitrary file read](https://junglewise.ai/threats/cve-2026-81994-adobe-acrobat-reader-prototype-pollution-arbitrary-file-read)
- [Adobe Acrobat Reader heap buffer overflow in PDF parsing](https://junglewise.ai/threats/cve-2026-81993-adobe-acrobat-reader-heap-buffer-overflow-in-pdf-parsing)
- [Adobe Acrobat Reader heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-81992-adobe-acrobat-reader-heap-based-buffer-overflow)