CVE-2012-1530

acroread: multiple code execution flaws (APSB13-02)

Published Jan 10, 2013 CVSS 2.0 · 10.0 Critical EPSS 8.6% KEV · Not listed
Description
Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing an XSL file that triggers memory corruption when the lang function processes XML data with a crafted node-set.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 7:01 PM
Reserved
Mar 8, 2012, 12:00 AM
Status
Modified
Published
Jan 10, 2013, 11:56 AM
Modified
Jun 16, 2026, 11:39 PM
Severity
Critical
Public date
Jan 8, 2013, 12:00 AM