CVE-2012-1530 Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code or cause a denial of s...
HighCVSS 10.0
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing an XSL file that triggers memory corruption when the lang function processes XML data with a crafted node-set.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | = 9.0 | No fix listed |
| Adobe acrobat | = 9.1 | No fix listed |
| Adobe acrobat | = 9.1.1 | No fix listed |
| Adobe acrobat | = 9.1.2 | No fix listed |
| Adobe acrobat | = 9.1.3 | No fix listed |
| Adobe acrobat | = 9.2 | No fix listed |
| Adobe acrobat | = 9.3 | No fix listed |
| Adobe acrobat | = 9.3.1 | No fix listed |
| Adobe acrobat | = 9.3.2 | No fix listed |
| Adobe acrobat | = 9.3.3 | No fix listed |
| Adobe acrobat | = 9.3.4 | No fix listed |
| Adobe acrobat | = 9.4 | No fix listed |
| Adobe acrobat | = 9.4.1 | No fix listed |
| Adobe acrobat | = 9.4.2 | No fix listed |
| Adobe acrobat | = 9.4.3 | No fix listed |
| Adobe acrobat | = 9.4.4 | No fix listed |
| Adobe acrobat | = 9.4.5 | No fix listed |
| Adobe acrobat | = 9.4.6 | No fix listed |
| Adobe acrobat | = 9.4.7 | No fix listed |
| Adobe acrobat | = 9.5 | No fix listed |
| Adobe acrobat | = 9.5.1 | No fix listed |
| Adobe acrobat | = 9.5.2 | No fix listed |
| Adobe acrobat | = 10.0 | No fix listed |
| Adobe acrobat | = 10.0.1 | No fix listed |
| Adobe acrobat | = 10.0.2 | No fix listed |
Show 39 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe acrobat | = 10.0.3 | No fix listed |
| Adobe acrobat | = 10.1 | No fix listed |
| Adobe acrobat | = 10.1.1 | No fix listed |
| Adobe acrobat | = 10.1.2 | No fix listed |
| Adobe acrobat | = 10.1.3 | No fix listed |
| Adobe acrobat | = 10.1.4 | No fix listed |
| Adobe acrobat | = 11.0 | No fix listed |
| Adobe Acrobat Reader | = 9.0 | No fix listed |
| Adobe Acrobat Reader | = 9.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.2 | No fix listed |
| Adobe Acrobat Reader | = 9.1.3 | No fix listed |
| Adobe Acrobat Reader | = 9.2 | No fix listed |
| Adobe Acrobat Reader | = 9.3 | No fix listed |
| Adobe Acrobat Reader | = 9.3.1 | No fix listed |
| Adobe Acrobat Reader | = 9.3.2 | No fix listed |
| Adobe Acrobat Reader | = 9.3.3 | No fix listed |
| Adobe Acrobat Reader | = 9.3.4 | No fix listed |
| Adobe Acrobat Reader | = 9.4 | No fix listed |
| Adobe Acrobat Reader | = 9.4.1 | No fix listed |
| Adobe Acrobat Reader | = 9.4.2 | No fix listed |
| Adobe Acrobat Reader | = 9.4.3 | No fix listed |
| Adobe Acrobat Reader | = 9.4.4 | No fix listed |
| Adobe Acrobat Reader | = 9.4.5 | No fix listed |
| Adobe Acrobat Reader | = 9.4.6 | No fix listed |
| Adobe Acrobat Reader | = 9.4.7 | No fix listed |
| Adobe Acrobat Reader | = 9.5 | No fix listed |
| Adobe Acrobat Reader | = 9.5.1 | No fix listed |
| Adobe Acrobat Reader | = 9.5.2 | No fix listed |
| Adobe Acrobat Reader | = 10.0 | No fix listed |
| Adobe Acrobat Reader | = 10.0.1 | No fix listed |
| Adobe Acrobat Reader | = 10.0.2 | No fix listed |
| Adobe Acrobat Reader | = 10.0.3 | No fix listed |
| Adobe Acrobat Reader | = 10.1 | No fix listed |
| Adobe Acrobat Reader | = 10.1.1 | No fix listed |
| Adobe Acrobat Reader | = 10.1.2 | No fix listed |
| Adobe Acrobat Reader | = 10.1.3 | No fix listed |
| Adobe Acrobat Reader | = 10.1.4 | No fix listed |
| Adobe Acrobat Reader | = 11.0 | No fix listed |
References
- SUSE-SU-2013:0044 vendor-advisory
- SUSE-SU-2013:0047 vendor-advisory
- openSUSE-SU-2013:0138 vendor-advisory
- openSUSE-SU-2013:0193 vendor-advisory
- RHSA-2013:0150 vendor-advisory
- GLSA-201308-03 vendor-advisory
- www.adobe.com patch vendor-advisory
- 20130108 Adobe Reader and Acrobat XSLT node() and lang() Memory Corruption Vulnerability third-party-advisory
- oval:org.mitre.oval:def:16094 signature vdb-entry