{"uuid": "d4da9ab5-8f90-4bc0-b95a-ae75dec4e860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_toolbutton.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Soroush Dalili\", \"Unknown\", \"sinn3r \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a use after free condition on Adobe Reader versions 11.0.2, 10.1.6\\n          and 9.5.4 and prior. The vulnerability exists while handling the ToolButton object, where\\n          the cEnable callback can be used to early free the object memory. Later use of the object\\n          allows triggering the use after free condition. This module has been tested successfully\\n          on Adobe Reader 11.0.2, 10.0.4 and 9.5.0 on Windows XP SP3, as exploited in the wild in\\n          November, 2013.\", \"disclosure_date\": \"2013-08-08\", \"fullname\": \"exploit/windows/fileformat/adobe_toolbutton\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Adobe Reader ToolButton Use After Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/adobe_toolbutton.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/adobe_toolbutton\", \"references\": [\"CVE-2013-3346\", \"OSVDB-96745\", \"ZDI-13-212\", \"URL-http://www.adobe.com/support/security/bulletins/apsb13-15.html\", \"URL-http://www.fireeye.com/blog/technical/cyber-exploits/2013/11/ms-windows-local-privilege-escalation-zero-day-in-the-wild.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows XP / Adobe Reader 9/10/11\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:20.271539Z"}