CVE-2013-0732 — Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in a TTF file, related to naming table entries

Back Back to CVE browser

HIGH

Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in a TTF file, related to naming table entries

Published Mar 27, 2014

9.3

HIGH

CVSS 2.0

EPSS 5.16%

Description

Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in a TTF file, related to naming table entries.

Affected products

Remediation

No remediation recorded yet.

Metrics

5.16% 0.05161

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.05161

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	5.16% (0.05161)	92.18th	v5 (v2026.06.15)
Jun 15, 2026	5.16% (0.05161)	91.33th	v5 (v2026.06.15)
Mar 19, 2025	12.93% (0.12929)	93.20th	v4 (v2025.03.14)
Mar 17, 2025	15.14% (0.15141)	94.08th	v4 (v2025.03.14)
Feb 14, 2025	4.08% (0.04075)	92.13th	v3 (v2023.03.01)
Mar 7, 2023	5.49% (0.05489)	91.99th	v3 (v2023.03.01)
Mar 6, 2023	6.31% (0.06309)	90.90th	v2 (v2022.01.01)
Apr 1, 2022	6.31% (0.06309)	90.06th	v2 (v2022.01.01)
Feb 4, 2022	6.31% (0.06309)	77.91th	v2 (v2022.01.01)

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

http://osvdb.org/93870
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/51943
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/60315
vdb-entryx_refsource_BID

Link	Providers	Tags
http://osvdb.org/93870		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/51943		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/60315		vdb-entryx_refsource_BID

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner flexera

Published Mar 27, 2014

Updated Aug 6, 2024

Reserved Jan 2, 2013

Link CVE-2013-0732

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-0732

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-0732