Adobe » Acrobat : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2013-0627		+Priv	2013-01-10	2013-02-07	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows local users to gain privileges via unknown vectors.
2	CVE-2012-4162	119	DoS Exec Code Overflow Mem. Corr.	2012-08-15	2012-08-15	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4161.
3	CVE-2012-4161	119	DoS Exec Code Overflow Mem. Corr.	2012-08-15	2012-08-15	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4162.
4	CVE-2012-0777	119	DoS Exec Code Overflow Mem. Corr.	2012-04-10	2013-02-14	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
5	CVE-2011-4373		DoS Exec Code Mem. Corr.	2012-01-10	2012-02-01	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4372.
6	CVE-2011-4372		DoS Exec Code Mem. Corr.	2012-01-10	2012-11-27	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4373.
7	CVE-2011-4371		DoS Exec Code Mem. Corr.	2012-01-10	2012-02-01	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
8	CVE-2011-4370		DoS Exec Code Mem. Corr.	2012-01-10	2012-02-01	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4372 and CVE-2011-4373.
9	CVE-2008-5331	310		2008-12-04	2008-12-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a document's password via a brute-force attack.
10	CVE-2008-4815	264	+Priv	2008-11-05	2012-11-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH.
11	CVE-2005-2470		DoS Exec Code Overflow	2005-08-16	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in a "core application plug-in" for Adobe Reader 5.1 through 7.0.2 and Acrobat 5.0 through 7.0.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
12	CVE-2004-0632		Exec Code Overflow	2004-07-27	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.
13	CVE-2004-0629		Exec Code Overflow	2004-09-28	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.
14	CVE-2003-0434		Exec Code	2003-07-24	2008-09-10	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.
15	CVE-2003-0284			2003-06-16	2008-09-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus.
16	CVE-2000-0713		Exec Code Overflow	2000-10-20	2008-09-05	7.6	Admin	Remote	High	Not required	Complete	Complete	Complete
Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.

Total number of vulnerabilities : 16 Page : 1 (This Page)