CVE

Id
54773  
CVE No.
CVE-2012-1530  
Status
Candidate  
Description
Heap-based buffer overflow in the XSLT engine in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PDF file containing an XSL file that triggers memory corruption when the lang function processes XML data with a crafted node-set.  
Phase
Assigned (20120308)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
573261 54773 CVE-2012-1530 IDEFENSE:20130108 Adobe Reader and Acrobat XSLT node() and lang() Memory Corruption Vulnerability  View
573262 54773 CVE-2012-1530 URL:http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1019  View
573263 54773 CVE-2012-1530 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb13-02.html  View
573264 54773 CVE-2012-1530 GENTOO:GLSA-201308-03  View
573265 54773 CVE-2012-1530 URL:http://security.gentoo.org/glsa/glsa-201308-03.xml  View
573266 54773 CVE-2012-1530 REDHAT:RHSA-2013:0150  View
573267 54773 CVE-2012-1530 URL:http://rhn.redhat.com/errata/RHSA-2013-0150.html  View
573268 54773 CVE-2012-1530 SUSE:SUSE-SU-2013:0044  View
573269 54773 CVE-2012-1530 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00004.html  View
573270 54773 CVE-2012-1530 SUSE:SUSE-SU-2013:0047  View
573271 54773 CVE-2012-1530 URL:http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00005.html  View
573272 54773 CVE-2012-1530 SUSE:openSUSE-SU-2013:0138  View
573273 54773 CVE-2012-1530 URL:http://lists.opensuse.org/opensuse-updates/2013-01/msg00028.html  View
573274 54773 CVE-2012-1530 SUSE:openSUSE-SU-2013:0193  View
573275 54773 CVE-2012-1530 URL:http://lists.opensuse.org/opensuse-updates/2013-01/msg00081.html  View
573276 54773 CVE-2012-1530 OVAL:oval:org.mitre.oval:def:16094  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27949 JVNDB-2012-003656 Adobe Flash Player における任意のコードを実行される脆弱性 Adobe Flash Player には、任意のコードを実行される、またはサービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-1535 54773 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003656.html  View