{"id":"CVE-2012-0777","aliases":["EUVD-2012-0809","GHSA-jxrq-6cjh-p9vf","RHSA-2012:0469"],"status":"published","title":"The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS...","description":"The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07073,"percentile":0.94256,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2012-04-10T23:00:00Z","modified":"2026-06-29T10:04:29Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.1-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.1-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.1-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.1-1.el5"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.1-1.el6_2"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.1-1.el6_2"}]}],"bundled":7}],"products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat_reader"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2012-0469.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48756","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb12-08.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","article"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/52950","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/48846","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA12-101B.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00013.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id?1026908","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/74735","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0777","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jxrq-6cjh-p9vf"},{"url":"https://access.redhat.com/errata/RHSA-2012:0469","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=810397","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0469.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4370","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4370","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4371","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4371","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4371","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4372","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4372","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4372","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4373","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4373","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4373","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0774","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0774","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0774","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0775","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0775","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0775","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-0777","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0777","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-0777","description":"The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","status":"published","published":"2012-04-10T23:00:00Z","modified":"2024-08-06T18:38:14.325Z","updated_at":"2026-11-02T14:34:52.638543Z"}],"euvd":[{"id":"EUVD-2012-0809","description":"The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","status":"published","published":"2012-04-10T23:00:00Z","modified":"2024-08-06T18:38:14Z","updated_at":"2026-11-03T01:56:20.258269Z"}],"ghsa":[{"id":"GHSA-jxrq-6cjh-p9vf","title":"The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS...","description":"The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","status":"published","published":"2022-05-14T03:51:36Z","modified":"2023-01-30T05:05:14Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:47:13.441339Z"}],"nvd":[{"id":"CVE-2012-0777","description":"The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.","status":"published","published":"2012-04-10T23:55:01.137Z","modified":"2026-06-16T23:38:14.61Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:13.901526Z"}],"osv":[{"id":"RHSA-2012:0469","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T07:59:21Z","modified":"2026-06-29T10:04:29Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}