CVE-2012-4363: Critical severity Adobe Acrobat Reader vulnerability

Published Aug 21, 2012

Updated

Multiple unspecified vulnerabilities in Adobe Reader through 10.1.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, related to "sixteen more crashes affecting Windows, OS X, or both systems."

Affected Software

79 affected components

Adobe Acrobat Reader=3.0

Adobe Acrobat Reader=3.01

Adobe Acrobat Reader=3.02

Adobe Acrobat Reader=4.0

Adobe Acrobat Reader=4.0.5

Adobe Acrobat Reader=4.0.5a

Adobe Acrobat Reader=4.0.5c

Adobe Acrobat Reader=4.5

Adobe Acrobat Reader=5.0

Adobe Acrobat Reader=5.0.5

Adobe Acrobat Reader=5.0.6

Adobe Acrobat Reader=5.0.7

Adobe Acrobat Reader=5.0.9

Adobe Acrobat Reader=5.0.10

Adobe Acrobat Reader=5.0.11

Adobe Acrobat Reader=5.1

Adobe Acrobat Reader=6.0

Adobe Acrobat Reader=6.0.1

Adobe Acrobat Reader=6.0.2

Adobe Acrobat Reader=6.0.3

Adobe Acrobat Reader=6.0.4

Adobe Acrobat Reader=6.0.5

Adobe Acrobat Reader=7.0

Adobe Acrobat Reader=7.0.1

Adobe Acrobat Reader=7.0.2

Adobe Acrobat Reader=7.0.3

Adobe Acrobat Reader=7.0.4

Adobe Acrobat Reader=7.0.5

Adobe Acrobat Reader=7.0.6

Adobe Acrobat Reader=7.0.7

Adobe Acrobat Reader=7.0.8

Adobe Acrobat Reader=7.0.9

Adobe Acrobat Reader=7.1.0

Adobe Acrobat Reader=8.0

Adobe Acrobat Reader=8.1

Adobe Acrobat Reader=8.1.1

Adobe Acrobat Reader=8.1.2

Adobe Acrobat Reader=8.1.3

Adobe Acrobat Reader=8.1.4

Adobe Acrobat Reader=8.1.5

Adobe Acrobat Reader=8.1.6

Adobe Acrobat Reader=8.1.7

Adobe Acrobat Reader=8.2

Adobe Acrobat Reader=8.2.1

Adobe Acrobat Reader=8.2.2

Adobe Acrobat Reader=8.2.3

Adobe Acrobat Reader=8.2.4

Adobe Acrobat Reader=8.2.6

Adobe Acrobat Reader=8.3

Adobe Acrobat Reader=9.0

Adobe Acrobat Reader=9.1

Adobe Acrobat Reader=9.1.1

Adobe Acrobat Reader=9.1.2

Adobe Acrobat Reader=9.1.3

Adobe Acrobat Reader=9.2

Adobe Acrobat Reader=9.3

Adobe Acrobat Reader=9.3.1

Adobe Acrobat Reader=9.3.2

Adobe Acrobat Reader=9.3.3

Adobe Acrobat Reader=9.3.4

Adobe Acrobat Reader=9.4

Adobe Acrobat Reader=9.4.1

Adobe Acrobat Reader=9.4.2

Adobe Acrobat Reader=9.4.3

Adobe Acrobat Reader=9.4.4

Adobe Acrobat Reader=9.4.5

Adobe Acrobat Reader=9.4.6

Adobe Acrobat Reader=9.4.7

Adobe Acrobat Reader=9.5

Adobe Acrobat Reader=9.5.1

Adobe Acrobat Reader=9.5.2

Adobe Acrobat Reader=10.1

Adobe Acrobat Reader=10.1.1

Adobe Acrobat Reader=10.1.2

Adobe Acrobat Reader=10.1.3

Adobe Acrobat Reader=10.1.4

Apple iOS and macOS

Linux Linux kernel

Microsoft Windows

Event History

Aug 21, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4363?

CVE-2012-4363 is classified as a high severity vulnerability due to its potential to cause denial of service or remote code execution.

How do I fix CVE-2012-4363?

To fix CVE-2012-4363, update Adobe Reader to the latest version released after October 2012.

What type of attack does CVE-2012-4363 allow?

CVE-2012-4363 allows remote attackers to crash the application or potentially execute arbitrary code via crafted PDF documents.

What software versions are affected by CVE-2012-4363?

CVE-2012-4363 affects multiple versions of Adobe Reader, including versions 3.0 to 10.1.4.

Is CVE-2012-4363 still a threat?

CVE-2012-4363 is less of a threat today as it affects outdated versions of Adobe Reader, but users should still upgrade to avoid old vulnerabilities.