CVE-2012-0777

Published: Apr 10, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Affected (4)

Products: Adobe: Acrobat Reader, Acrobat

Adobe

2 products

Acrobat Reader

Acrobat

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat Reader	From 10.0 to 10.1.3
Adobe Acrobat Reader	From 9.0 to 9.5.1

Configuration B

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Adobe Acrobat	From 10.0 to 10.1.3
Adobe Acrobat	From 9.0 to 9.5.1

Running on/with	Platform Versions
Apple Mac Os X	All versions
Linux Linux Kernel	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (22)

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00013.html

Source: psirt@adobe.com

Broken LinkMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00016.html

Source: psirt@adobe.com

Broken LinkMailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html

Source: psirt@adobe.com

Broken LinkMailing ListThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2012-0469.html

Source: psirt@adobe.com

Third Party Advisory

http://secunia.com/advisories/48756

Source: psirt@adobe.com

Broken Link

http://secunia.com/advisories/48846

Source: psirt@adobe.com

Broken Link

http://www.adobe.com/support/security/bulletins/apsb12-08.html

Source: psirt@adobe.com

Vendor Advisory

http://www.securityfocus.com/bid/52950

Source: psirt@adobe.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1026908

Source: psirt@adobe.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.us-cert.gov/cas/techalerts/TA12-101B.html

Source: psirt@adobe.com

MitigationThird Party AdvisoryUS Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/74735

Source: psirt@adobe.com

Third Party AdvisoryVDB Entry

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00013.html