CVE-2012-0775

The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code or cause a denial…

published April 10, 2012

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

⚠️ An unsuspecting user opening a PDF could be opening the door to attackers! This vulnerability in Adobe Reader allows arbitrary code execution, potentially leading to a denial of service. 🔥 Think of it like a seemingly harmless book that contains secret instructions to build a trap door. You open it, and without realizing it, the room goes dark and you’re stuck! An attacker could exploit this vulnerability to execute arbitrary code, giving them the keys to your whole system. This could result in serious disruptions, like crashing the application or even allowing unauthorized access. Yikes!

Put simply

Think of it like a seemingly harmless book that contains secret instructions to build a trap door. You open it, and without realizing it, the room goes dark and you’re stuck! The flaw resides in the JavaScript implementation of Adobe Reader and Acrobat versions prior to 9.5.1 and 10.1.3. Through unspecified vectors, attackers can manipulate how code runs, leading to memory corruption.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, giving them the keys to your whole system. This could result in serious disruptions, like crashing the application or even allowing unauthorized access. Yikes! To stay secure, update your Adobe Reader and Acrobat to versions 9.5.1 or 10.1.3 and newer. It’s a good practice to regularly check for software updates and apply them to keep your systems safe. You've got this! Just patch those versions and keep your PDFs safe from harm! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08977 · 95.2th percentile
Published
2012-04-10T23:00Z
EPSS history
Timeline
  • 10 APR 23:00Z
    The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code or cause a denial…
    cvelistv5