CVE-2012-4158

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service…

published August 15, 2012

CVSS
—
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

⚠️ A hidden flaw in Adobe Reader and Acrobat could let attackers execute arbitrary code, like an uninvited guest crashing a party! 🎉 Think of Adobe Reader as a dinner party where you invite just the right people. If someone sneaks in uninvited, they could wreak havoc in the kitchen or tamper with the main course, causing chaos among your guests. This vulnerability gives attackers a golden ticket to potentially crash your system or execute malicious code, leading to data breaches or a frustrating denial of service. It’s as if a party crasher could ruin your carefully planned event, disrupting everything in their wake!

Put simply

Think of Adobe Reader as a dinner party where you invite just the right people. If someone sneaks in uninvited, they could wreak havoc in the kitchen or tamper with the main course, causing chaos among your guests. This memory corruption vulnerability affects Adobe Reader and Acrobat by allowing attackers to exploit unspecified vectors to execute arbitrary code or cause a denial of service on affected systems, specifically versions prior to 9.5.2 and 10.1.4.

What to do

This vulnerability gives attackers a golden ticket to potentially crash your system or execute malicious code, leading to data breaches or a frustrating denial of service. It’s as if a party crasher could ruin your carefully planned event, disrupting everything in their wake! To protect yourself, immediately update Adobe Reader and Acrobat to the latest versions (9.5.2 or 10.1.4 and above). Additionally, consider implementing application whitelisting to help control what can run on your system. You've got this! With a few updates, you can keep those party crashers out and maintain your system's security! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07532 · 94.5th percentile
Published
2012-08-15T10:00Z
EPSS history
Timeline
  • 15 AUG 10:00Z
    Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service…
    cvelistv5