CVE-2012-0775: Buffer Overflow

Published Apr 10, 2012

Updated

The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Affected Software

52 affected components

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.1

Adobe Acrobat reader=9.1.2

Adobe Acrobat reader=9.1.3

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.3.1

Adobe Acrobat reader=9.3.2

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.4

Adobe Acrobat reader=9.4.1

Adobe Acrobat reader=9.4.2

Adobe Acrobat reader=9.4.3

Adobe Acrobat reader=9.4.4

Adobe Acrobat reader=9.4.5

Adobe Acrobat reader=9.4.6

Adobe Acrobat reader=9.4.7

Adobe Acrobat reader=9.5

Adobe Acrobat=10.0

Adobe Acrobat=10.0.1

Adobe Acrobat=10.0.2

Adobe Acrobat=10.0.3

Adobe Acrobat=10.1

Adobe Acrobat=10.1.1

Adobe Acrobat=10.1.2

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=9.4.2

Adobe Acrobat=9.4.3

Adobe Acrobat=9.4.4

Adobe Acrobat=9.4.5

Adobe Acrobat=9.4.6

Adobe Acrobat=9.4.7

Adobe Acrobat=9.5

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb12-08.html

Event History

Apr 10, 2012

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0775?

CVE-2012-0775 is classified as a critical vulnerability due to its potential to allow arbitrary code execution and denial of service.

How do I fix CVE-2012-0775?

To resolve CVE-2012-0775, update Adobe Reader and Acrobat to version 9.5.1 or later, or 10.1.3 or later.

Which versions of Adobe Reader are affected by CVE-2012-0775?

Adobe Reader versions 9.x before 9.5.1 and 10.x before 10.1.3 are affected by CVE-2012-0775.

What types of attacks can exploit CVE-2012-0775?

Attackers can exploit CVE-2012-0775 to execute arbitrary code or cause a denial of service through memory corruption.

Is there a workaround for CVE-2012-0775 if an update cannot be applied immediately?

While it is highly recommended to apply the update, avoiding the opening of untrusted PDF documents can act as a temporary mitigation for CVE-2012-0775.