CVE-2012-0777
medium
CVSS v3
—
CVSS v2
6.8
VIR risk
6.8
Description
The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@adobe.com — http://www.us-cert.gov/cas/techalerts/TA12-101B.html
Vendor advisory: psirt@adobe.com — http://www.adobe.com/support/security/bulletins/apsb12-08.html
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| macos | - | not-affected | |
| linux-kernel | - | not-affected | |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| adobe | acrobat_reader | {"startIncluding":"9.0","endExcluding":"9.5.1"} | 9.5.1 |
| adobe | acrobat | {"startIncluding":"9.0","endExcluding":"9.5.1"} | 9.5.1 |
References
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2012-0469.html
- http://secunia.com/advisories/48756
- http://secunia.com/advisories/48846
- http://www.adobe.com/support/security/bulletins/apsb12-08.html
- http://www.securityfocus.com/bid/52950
- http://www.securitytracker.com/id?1026908
- http://www.us-cert.gov/cas/techalerts/TA12-101B.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74735
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00013.html
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2012-0469.html
- http://secunia.com/advisories/48756
- http://secunia.com/advisories/48846
- http://www.adobe.com/support/security/bulletins/apsb12-08.html
- http://www.securityfocus.com/bid/52950
- http://www.securitytracker.com/id?1026908
- http://www.us-cert.gov/cas/techalerts/TA12-101B.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74735
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.