Adobe CVEs — known vulnerabilities

Flash Cs3 HIGH 10.0

CVE-2012-0778EPSS 11%

Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vectors.

Fix: after 11.0

Fix from $1,950 2012-05-09

Illustrator HIGH 10.0

CVE-2012-0780EPSS 15%

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a d…

Fix: after 15

Fix from $1,950 2012-05-09

Illustrator HIGH 10.0

CVE-2012-2023EPSS 5%

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a d…

Fix: after 15

Fix from $1,950 2012-05-09

Illustrator HIGH 10.0

CVE-2012-2024EPSS 5%

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a d…

Fix: after 15

Fix from $1,950 2012-05-09

Illustrator HIGH 10.0

CVE-2012-2025EPSS 5%

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a d…

Fix: after 15

Fix from $1,950 2012-05-09

Acrobat Reader HIGH 10.0

CVE-2012-0775EPSS 9%

The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code or cause…

Patch available

Fix from $1,950 2012-04-10

Acrobat Reader HIGH 10.0

CVE-2012-0776EPSS 8%

The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arbitrary c…

Patch available

Fix from $1,950 2012-04-10

Acrobat Reader MEDIUM 6.8

CVE-2012-0777EPSS 7%

The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary co…

Fix: 9.5.1 / 10.1.3+

Fix from $1,600 2012-04-10

Acrobat Reader HIGH 10.0

CVE-2012-0774EPSS 15%

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code via a crafted TrueTyp…

Patch available

Fix from $1,950 2012-04-10

Flash Player HIGH 10.0

CVE-2012-0772EPSS 6%

An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.2.0.2070, on Windows does not …

Fix: after 10.3.183.16

Fix from $1,950 2012-03-28

Flash Player HIGH 9.3

CVE-2012-0773EPSS 5%

The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.1…

Fix: 3.2.0.2070 / 10.3.183.18+

Fix from $1,950 2012-03-28

Coldfusion MEDIUM 5.0

CVE-2012-0770

Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisions predi…

Mitigation only

Fix from $1,600 2012-03-13

Flash Player HIGH 10.0

CVE-2012-0768EPSS 6%

The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111…

Fix: after 11.1.115.6

Fix from $1,950 2012-03-05

Flash Player MEDIUM 5.0

CVE-2012-0769

Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x;…

Fix: after 11.1.115.6

Fix from $1,600 2012-03-05

Flash Player HIGH 8.1

CVE-2012-0754 KEVEPSS 92%

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x;…

Fix: 10.3.183.15 / 11.1.102.62+

Fix from $1,950 2012-02-16

Flash Player MEDIUM 6.1

CVE-2012-0767 KEVEPSS 7%

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solari…

Fix: 10.3.183.15 / 11.1.102.62+

Fix from $1,600 2012-02-16

Reader HIGH 9.3

CVE-2011-4374

Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Fix: after 10.1

Fix from $1,950 2012-01-19

Acrobat CRITICAL 9.8

CVE-2011-4372EPSS 13%

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of s…

Fix: after 10.1.1

Fix from $2,300 2012-01-10

Acrobat CRITICAL 9.8

CVE-2011-4373EPSS 31%

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of s…

Fix: after 10.1.1

Fix from $2,300 2012-01-10

Acrobat HIGH 7.5

CVE-2011-4371EPSS 6%

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of s…

Fix: after 10.1.1

Fix from $1,950 2012-01-10

Acrobat HIGH 7.5

CVE-2011-4370EPSS 6%

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of s…

Fix: after 10.1.1

Fix from $1,950 2012-01-10

Acrobat HIGH 10.0

CVE-2011-4369EPSS 8%

Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on…

Patch available

Fix from $1,950 2011-12-16

Acrobat CRITICAL 9.8

CVE-2011-2462 KEVEPSS 87%

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9…

Fix: after 10.1.1

Fix from $2,300 2011-12-07

Flash Player HIGH 10.0

CVE-2011-2445EPSS 6%

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Ado…

Fix: 3.1.0.4880 / 10.3.183.11+