CVE-2012-4363

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-08-21 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in Adobe Reader through 10.1.4 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, related to "sixteen more crashes affecting Windows, OS X, or both systems."

Affected products

Adobe Acrobat Reader: 3.0, 3.01, 3.02, 4.0, 4.0.5, 4.0.5a (+70)

References

http://gynvael.coldwind.pl/?id=483
http://j00ru.vexillium.org/?p=1175
http://security.gentoo.org/glsa/glsa-201308-03.xml
http://vexillium.org/dl.php?ar_callstack.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/78587
http://gynvael.coldwind.pl/?id=483
http://j00ru.vexillium.org/?p=1175
http://security.gentoo.org/glsa/glsa-201308-03.xml
http://vexillium.org/dl.php?ar_callstack.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/78587

Get alerted when CVE-2012-4363 or the next vulnerability affects your stack