CVE-2012-2049

Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary…

published August 15, 2012

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

⚠️ A crafty attack could exploit a stack-based buffer overflow in Adobe Reader and Acrobat versions 9.x before 9.5.2 and 10.x before 10.1.4! 📥 Think of it like a library that’s so full of books that adding just one more can cause the shelves to collapse! This overflow can let attackers sneak in some malicious code just as easily as a rogue book slips onto the shelf. If exploited, an attacker could execute arbitrary code on your system, leading to potential data breaches or even total control over your device. The consequences could range from annoying pop-ups to complete chaos!

Put simply

Think of it like a library that’s so full of books that adding just one more can cause the shelves to collapse! This overflow can let attackers sneak in some malicious code just as easily as a rogue book slips onto the shelf. This vulnerability allows an attacker to trigger a stack-based buffer overflow through unspecified vectors, which could result in running arbitrary code on affected systems. Essentially, the program trusts input too much and doesn’t adequately check its size!

What to do

If exploited, an attacker could execute arbitrary code on your system, leading to potential data breaches or even total control over your device. The consequences could range from annoying pop-ups to complete chaos! To protect yourself, update Adobe Reader and Acrobat to at least version 9.5.2 or 10.1.4 immediately. Regularly apply updates and consider disabling JavaScript in Adobe settings until you can safely patch. 🛡️ You've got this! With a quick update, you can keep your system safe and sound! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13211 · 96.3th percentile
Published
2012-08-15T10:00Z
EPSS history
Timeline
  • 15 AUG 10:00Z
    Stack-based buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary…
    cvelistv5