{"vulnerability": "CVE-2013-3346", "sightings": [{"uuid": "ae74bd7f-5a1c-4596-a7a4-ea034028b5a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "f283ae08-5896-45e6-acc5-e0763f48a948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971290", "content": "", "creation_timestamp": "2024-12-24T20:27:06.508473Z"}, {"uuid": "b1c285d5-0efa-4841-b89b-38d0c6c45948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "d9af842a-301a-4997-9652-f2b0dd22875c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:04.000000Z"}, {"uuid": "2db07ed2-5b27-4fed-89d2-6b938296f998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:17.000000Z"}, {"uuid": "13497126-2c08-4778-ab86-4e31ffaf2d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:42.000000Z"}, {"uuid": "635e178f-2c8a-48d4-801a-fbecfb5c2cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:56.000000Z"}, {"uuid": "40f00029-b007-4345-a917-a92fa21fee0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_toolbutton.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "32f60087-6b88-497d-a394-52ff4a70ecc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_toolbutton.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "2f7d4cdd-00f3-4808-b69a-213215fbe6ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2013-3346", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6701031-d4c8-4bb9-8022-c35fe85ba92a", "content": "", "creation_timestamp": "2026-02-02T12:28:19.381205Z"}, {"uuid": "50b2e8ff-9960-4628-a0df-77e78fb08241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-3346", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/30394", "content": "", "creation_timestamp": "2013-12-17T00:00:00.000000Z"}, {"uuid": "c39142eb-9cf9-4e1f-a261-d7f7adccd6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "Telegram/1NSIX1wu2gyUOfYjusC-VT-KGW0oSSja3s2e2DaPm70aZ1Y9", "content": "", "creation_timestamp": "2025-02-14T21:08:31.000000Z"}, {"uuid": "b397a918-c53d-46e7-b78e-1bdf4a8527cb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/caa48245-9d97-45c4-b83b-356f1e94e50b", "content": "", "creation_timestamp": "2026-06-19T12:47:31.907825Z"}, {"uuid": "63208c1c-22c8-4f8a-ac68-b4876e6667db", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c445adce-ca33-47b2-a73b-1761e1e7e620", "content": "", "creation_timestamp": "2026-06-23T14:05:00.054623Z"}, {"uuid": "463277af-9616-456b-a1f2-7c75d44e18aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_toolbutton.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Soroush Dalili\", \"Unknown\", \"sinn3r \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an use after free condition on Adobe Reader versions 11.0.2, 10.1.6\\n          and 9.5.4 and prior. The vulnerability exists while handling the ToolButton object, where\\n          the cEnable callback can be used to early free the object memory. Later use of the object\\n          allows triggering the use after free condition. This module has been tested successfully\\n          on Adobe Reader 11.0.2 and 10.0.4, with IE and Windows XP SP3, as exploited in the wild in\\n          November, 2013. At the moment, this module doesn't support Adobe Reader 9 targets; in order\\n          to exploit Adobe Reader 9 the fileformat version of the exploit can be used.\", \"disclosure_date\": \"2013-08-08\", \"fullname\": \"exploit/windows/browser/adobe_toolbutton\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Adobe Reader ToolButton Use After Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/adobe_toolbutton.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/adobe_toolbutton\", \"references\": [\"CVE-2013-3346\", \"OSVDB-96745\", \"ZDI-13-212\", \"URL-http://www.adobe.com/support/security/bulletins/apsb13-15.html\", \"URL-http://www.fireeye.com/blog/technical/cyber-exploits/2013/11/ms-windows-local-privilege-escalation-zero-day-in-the-wild.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows XP / IE / Adobe Reader 10/11\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:58.797570Z"}, {"uuid": "d4da9ab5-8f90-4bc0-b95a-ae75dec4e860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3346", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_toolbutton.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Soroush Dalili\", \"Unknown\", \"sinn3r \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a use after free condition on Adobe Reader versions 11.0.2, 10.1.6\\n          and 9.5.4 and prior. The vulnerability exists while handling the ToolButton object, where\\n          the cEnable callback can be used to early free the object memory. Later use of the object\\n          allows triggering the use after free condition. This module has been tested successfully\\n          on Adobe Reader 11.0.2, 10.0.4 and 9.5.0 on Windows XP SP3, as exploited in the wild in\\n          November, 2013.\", \"disclosure_date\": \"2013-08-08\", \"fullname\": \"exploit/windows/fileformat/adobe_toolbutton\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Adobe Reader ToolButton Use After Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/adobe_toolbutton.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/adobe_toolbutton\", \"references\": [\"CVE-2013-3346\", \"OSVDB-96745\", \"ZDI-13-212\", \"URL-http://www.adobe.com/support/security/bulletins/apsb13-15.html\", \"URL-http://www.fireeye.com/blog/technical/cyber-exploits/2013/11/ms-windows-local-privilege-escalation-zero-day-in-the-wild.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows XP / Adobe Reader 9/10/11\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:20.271539Z"}]}