CVE-2012-0776 Privilege escalation in n/a

Critical 10.0 Published Updated

Attackers can bypass access restrictions and execute arbitrary code via the Adobe Reader installer, requiring user interaction.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
A user has to click or open something
Fix
None listed

What is CVE-2012-0776?

CVE-2012-0776 is a critical vulnerability in Adobe Acrobat, published on 10 Apr 2012. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors.

Weakness: CWE-264

Which versions are affected by CVE-2012-0776?

It affects 2 products.

Products include Adobe Acrobat, Adobe Acrobat Reader.

How do I fix CVE-2012-0776?

No fix has been published for CVE-2012-0776 yet. Limit exposure of the affected software until one is available.

Is CVE-2012-0776 being exploited?

There is no known exploitation of CVE-2012-0776 in the wild and no public exploit code.

All Adobe Acrobat vulnerabilities

Sources

Also known as GHSA-p542-h3rv-23cv.

Is CVE-2012-0776 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free