NetSight
IP …
critical10.0

CVE-2012-1530

Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to exec…

Impact

Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing an XSL file that triggers memory corruption when the lang function processes XML data with a crafted node-set.

Affected products

VendorProductAffected versions
AdobeAcrobat
Versions 9.0, 9.1, 9.1.1, 9.1.2, 9.1.3, 9.2
AdobeAcrobat Reader
Versions 9.0, 9.1, 9.1.1, 9.1.2, 9.1.3, 9.2

Weakness classification

CWE-119

References