CVE-2012-1530

Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to…

published January 10, 2013

CVSS
—
EPSS
9%
Percentile
95.0
In the wild
Unconfirmed
What it is

🚨 A crafty PDF could trigger havoc in Adobe Reader and Acrobat, thanks to a heap-based buffer overflow! Think of it as a faulty parcel that explodes when you try to open it, spilling all its contents over your desk — except in this case, it could let attackers run wild with arbitrary code. An attacker could leverage this vulnerability to execute unwanted code or disrupt services, leading to potential data breaches or application crashes. This could be absolutely devastating for users relying on Adobe for secure document access!

Put simply

Think of it as a faulty parcel that explodes when you try to open it, spilling all its contents over your desk — except in this case, it could let attackers run wild with arbitrary code. The heap-based buffer overflow occurs in the XSLT engine when processing XML data with a crafted node-set, allowing for memory corruption that could be exploited to execute arbitrary code.

What to do

An attacker could leverage this vulnerability to execute unwanted code or disrupt services, leading to potential data breaches or application crashes. This could be absolutely devastating for users relying on Adobe for secure document access! Upgrade your Adobe Reader and Acrobat to at least version 9.5.3, 10.1.5, or 11.0.1 to patch the vulnerability. Always ensure your software is up-to-date to minimize risks! You've got this! Stay vigilant, keep your software updated, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08571 · 95.0th percentile
Published
2013-01-10T11:00Z
EPSS history
Timeline
  • 10 JAN 11:00Z
    Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to…
    cvelistv5