Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-1530

Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing an XSL file that triggers memory corruption when the lang function processes XML data with a crafted node-set.

Published

2013-01-10T11:56:50.610

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe acrobat 9.0 Yes
Application adobe acrobat 9.0 Yes
Application adobe acrobat 9.1 Yes
Application adobe acrobat 9.1 Yes
Application adobe acrobat 9.1.1 Yes
Application adobe acrobat 9.1.1 Yes
Application adobe acrobat 9.1.2 Yes
Application adobe acrobat 9.1.3 Yes
Application adobe acrobat 9.1.3 Yes
Application adobe acrobat 9.2 Yes
Application adobe acrobat 9.2 Yes
Application adobe acrobat 9.3 Yes
Application adobe acrobat 9.3 Yes
Application adobe acrobat 9.3.1 Yes
Application adobe acrobat 9.3.1 Yes
Application adobe acrobat 9.3.2 Yes
Application adobe acrobat 9.3.2 Yes
Application adobe acrobat 9.3.3 Yes
Application adobe acrobat 9.3.4 Yes
Application adobe acrobat 9.3.4 Yes
Application adobe acrobat 9.4 Yes
Application adobe acrobat 9.4.1 Yes
Application adobe acrobat 9.4.1 Yes
Application adobe acrobat 9.4.2 Yes
Application adobe acrobat 9.4.2 Yes
Application adobe acrobat 9.4.3 Yes
Application adobe acrobat 9.4.3 Yes
Application adobe acrobat 9.4.4 Yes
Application adobe acrobat 9.4.4 Yes
Application adobe acrobat 9.4.5 Yes
Application adobe acrobat 9.4.5 Yes
Application adobe acrobat 9.4.6 Yes
Application adobe acrobat 9.4.6 Yes
Application adobe acrobat 9.4.7 Yes
Application adobe acrobat 9.5 Yes
Application adobe acrobat 9.5.1 Yes
Application adobe acrobat 9.5.2 Yes
Application adobe acrobat_reader 9.0 Yes
Application adobe acrobat_reader 9.1 Yes
Application adobe acrobat_reader 9.1.1 Yes
Application adobe acrobat_reader 9.1.2 Yes
Application adobe acrobat_reader 9.1.3 Yes
Application adobe acrobat_reader 9.2 Yes
Application adobe acrobat_reader 9.3 Yes
Application adobe acrobat_reader 9.3.1 Yes
Application adobe acrobat_reader 9.3.2 Yes
Application adobe acrobat_reader 9.3.3 Yes
Application adobe acrobat_reader 9.3.4 Yes
Application adobe acrobat_reader 9.4 Yes
Application adobe acrobat_reader 9.4.1 Yes
Application adobe acrobat_reader 9.4.2 Yes
Application adobe acrobat_reader 9.4.3 Yes
Application adobe acrobat_reader 9.4.4 Yes
Application adobe acrobat_reader 9.4.5 Yes
Application adobe acrobat_reader 9.4.6 Yes
Application adobe acrobat_reader 9.4.7 Yes
Application adobe acrobat_reader 9.5 Yes
Application adobe acrobat_reader 9.5.1 Yes
Application adobe acrobat_reader 9.5.2 Yes
Application adobe acrobat 10.0 Yes
Application adobe acrobat 10.0 Yes
Application adobe acrobat 10.0.1 Yes
Application adobe acrobat 10.0.1 Yes
Application adobe acrobat 10.0.2 Yes
Application adobe acrobat 10.0.3 Yes
Application adobe acrobat 10.1 Yes
Application adobe acrobat 10.1.1 Yes
Application adobe acrobat 10.1.2 Yes
Application adobe acrobat 10.1.3 Yes
Application adobe acrobat 10.1.4 Yes
Application adobe acrobat_reader 10.0 Yes
Application adobe acrobat_reader 10.0.1 Yes
Application adobe acrobat_reader 10.0.2 Yes
Application adobe acrobat_reader 10.0.3 Yes
Application adobe acrobat_reader 10.1 Yes
Application adobe acrobat_reader 10.1.1 Yes
Application adobe acrobat_reader 10.1.2 Yes
Application adobe acrobat_reader 10.1.3 Yes
Application adobe acrobat_reader 10.1.4 Yes
Application adobe acrobat 11.0 Yes
Application adobe acrobat_reader 11.0 Yes
References