7.9 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.4%
The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CPE | Name | Operator | Version |
---|---|---|---|
acrobat | ge | 9.0 | |
acrobat | lt | 9.5.1 | |
acrobat | ge | 10.0 | |
acrobat | lt | 10.1.3 | |
acrobat_reader | ge | 9.0 | |
acrobat_reader | lt | 9.5.1 | |
acrobat_reader | ge | 10.0 | |
acrobat_reader | lt | 10.1.3 |
lists.opensuse.org/opensuse-security-announce/2012-04/msg00013.html
lists.opensuse.org/opensuse-security-announce/2012-04/msg00016.html
lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html
rhn.redhat.com/errata/RHSA-2012-0469.html
secunia.com/advisories/48756
secunia.com/advisories/48846
www.adobe.com/support/security/bulletins/apsb12-08.html
www.securityfocus.com/bid/52950
www.securitytracker.com/id?1026908
www.us-cert.gov/cas/techalerts/TA12-101B.html
exchange.xforce.ibmcloud.com/vulnerabilities/74735