CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
83.8%
The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Vendor | Product | Version | CPE |
---|---|---|---|
adobe | acrobat_reader | * | cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* |
apple | mac_os_x | - | cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:* |
linux | linux_kernel | - | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
adobe | acrobat | * | cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* |
lists.opensuse.org/opensuse-security-announce/2012-04/msg00013.html
lists.opensuse.org/opensuse-security-announce/2012-04/msg00016.html
lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html
rhn.redhat.com/errata/RHSA-2012-0469.html
secunia.com/advisories/48756
secunia.com/advisories/48846
www.adobe.com/support/security/bulletins/apsb12-08.html
www.securityfocus.com/bid/52950
www.securitytracker.com/id?1026908
www.us-cert.gov/cas/techalerts/TA12-101B.html
exchange.xforce.ibmcloud.com/vulnerabilities/74735