{"api_version":"1","generated_at":"2026-07-23T13:12:10+00:00","cve":"CVE-2013-4986","urls":{"html":"https://cve.report/CVE-2013-4986","api":"https://cve.report/api/cve/CVE-2013-4986.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-4986","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-4986"},"summary":{"title":"CVE-2013-4986","description":"Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file.","state":"PUBLISHED","assigner":"mitre","published_at":"2013-10-04 20:55:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.coresecurity.com/advisories/pdfcool-studio-buffer-overflow-vulnerability","name":"http://www.coresecurity.com/advisories/pdfcool-studio-buffer-overflow-vulnerability","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"PDFCool Studio Buffer Overflow Vulnerability | CORE Security","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.com/files/123476","name":"http://packetstormsecurity.com/files/123476","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"PDFCool Studio Buffer Overflow ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/97959","name":"http://osvdb.org/97959","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-10/0002.html","name":"http://archives.neohapsis.com/archives/bugtraq/2013-10/0002.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://secunia.com/advisories/55058","name":"http://secunia.com/advisories/55058","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA55058 - PDFCool Studio PDF Processing Buffer Overflow Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4986","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4986","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.0","cpe7":"build110427","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.0","cpe7":"build110502","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.0","cpe7":"build110508","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.0","cpe7":"build110510","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.0","cpe7":"build110512","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.10","cpe7":"build110519","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.10","cpe7":"build110523","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.12","cpe7":"build110528","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.14","cpe7":"build110608","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.16","cpe7":"build110612","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.20","cpe7":"build110707","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.24","cpe7":"build1110801","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.26","cpe7":"build110823","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.30","cpe7":"build110920","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.40","cpe7":"build111016","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.5","cpe7":"build120405","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.6","cpe7":"build120405","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.7","cpe7":"build120405","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"2.8","cpe7":"build120518","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"3.0","cpe7":"build121022","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4986","vulnerable":"1","versionEndIncluding":"3.32","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"iconcool","cpe5":"pdfcool_studio","cpe6":"*","cpe7":"build130330","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T16:59:41.283Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"97959","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/97959"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/123476"},{"name":"55058","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/55058"},{"name":"20131001 CORE-2013-0828 - PDFCool Studio Buffer Overflow Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://archives.neohapsis.com/archives/bugtraq/2013-10/0002.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.coresecurity.com/advisories/pdfcool-studio-buffer-overflow-vulnerability"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-10-04T20:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"97959","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/97959"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/123476"},{"name":"55058","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/55058"},{"name":"20131001 CORE-2013-0828 - PDFCool Studio Buffer Overflow Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://archives.neohapsis.com/archives/bugtraq/2013-10/0002.html"},{"tags":["x_refsource_MISC"],"url":"http://www.coresecurity.com/advisories/pdfcool-studio-buffer-overflow-vulnerability"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2013-4986","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"97959","refsource":"OSVDB","url":"http://osvdb.org/97959"},{"name":"http://packetstormsecurity.com/files/123476","refsource":"MISC","url":"http://packetstormsecurity.com/files/123476"},{"name":"55058","refsource":"SECUNIA","url":"http://secunia.com/advisories/55058"},{"name":"20131001 CORE-2013-0828 - PDFCool Studio Buffer Overflow Vulnerability","refsource":"BUGTRAQ","url":"http://archives.neohapsis.com/archives/bugtraq/2013-10/0002.html"},{"name":"http://www.coresecurity.com/advisories/pdfcool-studio-buffer-overflow-vulnerability","refsource":"MISC","url":"http://www.coresecurity.com/advisories/pdfcool-studio-buffer-overflow-vulnerability"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2013-4986","datePublished":"2013-10-04T20:00:00.000Z","dateReserved":"2013-07-29T00:00:00.000Z","dateUpdated":"2024-09-17T01:51:17.243Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-10-04 20:55:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:*:build130330:*:*:*:*:*:*","versionEndIncluding":"3.32","matchCriteriaId":"CE927616-364A-47FD-A8F2-B729CF782DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.0:build110427:*:*:*:*:*:*","matchCriteriaId":"E22F83EF-815B-4189-940F-F72C99FFEA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.0:build110502:*:*:*:*:*:*","matchCriteriaId":"C4421A6A-EC4F-4E49-95B6-37EB07BA181C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.0:build110508:*:*:*:*:*:*","matchCriteriaId":"793764EB-2126-4373-A8C3-06E8F3D0DF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.0:build110510:*:*:*:*:*:*","matchCriteriaId":"F3BB88EC-01A2-4DC7-AB28-F528A5173D25"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.0:build110512:*:*:*:*:*:*","matchCriteriaId":"BCAEDB87-E317-4C85-B76B-64EB9520D7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.5:build120405:*:*:*:*:*:*","matchCriteriaId":"EC35DEEC-5D05-4236-A1DC-13BBA55D2244"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.6:build120405:*:*:*:*:*:*","matchCriteriaId":"A72A5C03-F83B-4C08-B0FD-8E1BCE065381"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.7:build120405:*:*:*:*:*:*","matchCriteriaId":"2A24C381-237D-4110-AA54-B267B97D1847"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.8:build120518:*:*:*:*:*:*","matchCriteriaId":"F25243D1-1334-414A-AD72-AF41A45A00FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.10:build110519:*:*:*:*:*:*","matchCriteriaId":"288EDBD5-0DA2-43E1-BD0E-9194B2904A31"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.10:build110523:*:*:*:*:*:*","matchCriteriaId":"D2B4FFD9-F07E-402D-9466-183A02E9D957"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.12:build110528:*:*:*:*:*:*","matchCriteriaId":"9E483482-8134-4C7B-94AB-8DEB20057A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.14:build110608:*:*:*:*:*:*","matchCriteriaId":"752C6451-01CC-4A70-AE25-9327DAF09F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.16:build110612:*:*:*:*:*:*","matchCriteriaId":"9C07F0B9-8606-4AE8-A287-77EFCDA4F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.20:build110707:*:*:*:*:*:*","matchCriteriaId":"0782767B-35F8-4773-8971-887D83D94977"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.24:build1110801:*:*:*:*:*:*","matchCriteriaId":"ABF1E406-151C-433D-B63E-3DEA503F228B"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.26:build110823:*:*:*:*:*:*","matchCriteriaId":"12780165-8FAB-4FB1-99DA-473F17CFBC60"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.30:build110920:*:*:*:*:*:*","matchCriteriaId":"F1EFD1C3-AA97-4481-B951-0E7568CC7157"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:2.40:build111016:*:*:*:*:*:*","matchCriteriaId":"3CE505AE-844A-4D8A-9152-029263A2A504"},{"vulnerable":true,"criteria":"cpe:2.3:a:iconcool:pdfcool_studio:3.0:build121022:*:*:*:*:*:*","matchCriteriaId":"4E48EE0F-5DFB-4ECD-87BB-0561EDDEF9E0"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"4986","Ordinal":"1","Title":"CVE-2013-4986","CVE":"CVE-2013-4986","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"4986","Ordinal":"1","NoteData":"Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1125.2121 in IconCool PDFCool Studio 3.32 Build 130330 and earlier allows remote attackers to execute arbitrary code via a crafted PDF file.","Type":"Description","Title":"CVE-2013-4986"},{"CveYear":"2013","CveId":"4986","Ordinal":"2","NoteData":"2013-10-04","Type":"Other","Title":"Published"}]}}}