CVE-2012-4156

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service…

published August 15, 2012

CVSS
—
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

⚠️ A tantalizing gap in Adobe Reader and Acrobat could pave the way for memory corruption attacks! 🔥 Think of this vulnerability as a restaurant kitchen where the chef can prepare any dish without checking the ingredients first — if the wrong ingredient gets in, it could spoil the entire meal! An attacker might exploit this flaw to execute arbitrary code or crash the application entirely, leading to denial of service. In practice, this means they could take control of your system or simply render Adobe Reader unusable, causing chaos when you need to access important documents.

Put simply

Think of this vulnerability as a restaurant kitchen where the chef can prepare any dish without checking the ingredients first — if the wrong ingredient gets in, it could spoil the entire meal! This vulnerability allows attackers to execute arbitrary code or cause a denial of service through unspecified vectors in Adobe Reader and Acrobat 9.x and 10.x on Windows and Mac OS X, which can result in memory corruption during operations.

What to do

An attacker might exploit this flaw to execute arbitrary code or crash the application entirely, leading to denial of service. In practice, this means they could take control of your system or simply render Adobe Reader unusable, causing chaos when you need to access important documents. To protect yourself, upgrade Adobe Reader and Acrobat to the latest versions: 9.5.2 or later for 9.x and 10.1.4 or later for 10.x. Regularly check for updates to ensure you’re not leaving doors open for potential attackers. You’ve got this! Just follow these steps, and you’ll secure your Adobe software in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07532 · 94.5th percentile
Published
2012-08-15T10:00Z
EPSS history
Timeline
  • 15 AUG 10:00Z
    Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5