CVE-2012-0774

2012-04-1023:55:00

CWE-189

[email protected]

web.nvd.nist.gov

114

cve-2012-0774

integer overflow

adobe reader

acrobat

arbitrary code execution

truetype font

nvd

9.5 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.148 Low

EPSS

Percentile

95.8%

JSON

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code via a crafted TrueType font.

CPENameOperatorVersion
adobe:acrobat_readeradobe acrobat readereq9.4.3
adobe:acrobat_readeradobe acrobat readereq9.2
adobe:acrobat_readeradobe acrobat readereq9.1
adobe:acrobat_readeradobe acrobat readereq9.4.6
adobe:acrobat_readeradobe acrobat readereq9.1.3
adobe:acrobat_readeradobe acrobat readereq9.1.2
adobe:acrobat_readeradobe acrobat readereq9.3.3
adobe:acrobat_readeradobe acrobat readereq9.4.2
adobe:acrobat_readeradobe acrobat readereq9.1.1
adobe:acrobat_readeradobe acrobat readereq9.4.5

CPE	Name	Operator	Version
adobe:acrobat_reader	adobe acrobat reader	eq	9.4.3
adobe:acrobat_reader	adobe acrobat reader	eq	9.2
adobe:acrobat_reader	adobe acrobat reader	eq	9.1
adobe:acrobat_reader	adobe acrobat reader	eq	9.4.6
adobe:acrobat_reader	adobe acrobat reader	eq	9.1.3
adobe:acrobat_reader	adobe acrobat reader	eq	9.1.2
adobe:acrobat_reader	adobe acrobat reader	eq	9.3.3
adobe:acrobat_reader	adobe acrobat reader	eq	9.4.2
adobe:acrobat_reader	adobe acrobat reader	eq	9.1.1
adobe:acrobat_reader	adobe acrobat reader	eq	9.4.5