CVE-2012-4149

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service…

published August 15, 2012

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

⚠️ This sneaky memory corruption vulnerability in Adobe Reader and Acrobat has been hiding in versions before 9.5.2 and 10.1.4, just waiting for a chance to pounce! 🔍 Think of it like a dining room chair with a hidden structural weakness; it looks fine from the outside, but one wrong move can send you crashing down. In this case, attackers can exploit these unspecified vulnerabilities to execute arbitrary code or trigger a denial of service. If exploited, an attacker could potentially take complete control of your system or cause Adobe Reader to crash unexpectedly — leaving you reeling like a diner after a broken chair! While there are no confirmed exploits in the wild, the risk remains, so it's a situation you definitely want to address.

Put simply

Think of it like a dining room chair with a hidden structural weakness; it looks fine from the outside, but one wrong move can send you crashing down. In this case, attackers can exploit these unspecified vulnerabilities to execute arbitrary code or trigger a denial of service. This vulnerability allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors. Affected products include Adobe Reader and Acrobat versions prior to 9.5.2 and 10.1.4 on both Windows and Mac OS X.

What to do

If exploited, an attacker could potentially take complete control of your system or cause Adobe Reader to crash unexpectedly — leaving you reeling like a diner after a broken chair! While there are no confirmed exploits in the wild, the risk remains, so it's a situation you definitely want to address. To protect yourself, make sure to update Adobe Reader and Acrobat to the latest versions (9.5.2 or 10.1.4 and above). Regularly check for updates and patches to stay secure. It's a good idea to set your software to automatically update, so you always have the latest defenses! You've got this! With a quick patch, you'll be back to browsing PDFs safely in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13128 · 96.3th percentile
Published
2012-08-15T10:00Z
EPSS history
Timeline
  • 15 AUG 10:00Z
    Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5