CVE-2013-1607

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2020
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-16086.7Directory traversal vulnerability in the Management Console on the Symantec NetBackup (NBU) appliance 2.0.x allows remote attackers to read CVE-2013-16097.8Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise VauCVE-2013-16106.8Unquoted Windows search path vulnerability in RDDService in Symantec PGP Desktop 10.0.x through 10.2.x and Symantec Encryption Desktop 10.3.CVE-2013-16113.5Multiple cross-site scripting (XSS) vulnerabilities in administrative-interface pages in the management console in Symantec Brightmail GatewCVE-2013-16127.9Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec EnCVE-2013-16134.7SQL injection vulnerability in the management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.xCVE-2013-16144.3Multiple cross-site scripting (XSS) vulnerabilities in the management console (aka Java console) on the Symantec Security Information ManageCVE-2013-16152.9The management console (aka Java console) on the Symantec Security Information Manager (SSIM) appliance 4.7.x and 4.8.x before 4.8.1 allows CVE-2013-16168.3The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injCVE-2013-16177.4Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote autheCVE-2013-16184.0The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the procCVE-2013-16194.0The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel
CVE-2013-1607: Critical severity, CVSS 9.8 | Vulnix