CVE-2012-2024

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2025, and CVE-2012-2026.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/81756
http://www.adobe.com/support/security/bulletins/apsb12-10.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/53422
http://www.securitytracker.com/id?1027047
https://exchange.xforce.ibmcloud.com/vulnerabilities/75447

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:adobe:illustrator:7.0:::::::*
	cpe:2.3:a:adobe:illustrator:8.0:::::::*
	cpe:2.3:a:adobe:illustrator:9.0:::::::*
	cpe:2.3:a:adobe:illustrator:10.0:::::::*
	cpe:2.3:a:adobe:illustrator:11.0:::::::*
	cpe:2.3:a:adobe:illustrator:11.0.1:::::::*
	cpe:2.3:a:adobe:illustrator:12.0.0:::::::*
	cpe:2.3:a:adobe:illustrator:13.0:::::::*
	cpe:2.3:a:adobe:illustrator:13.0.1:::::::*
	cpe:2.3:a:adobe:illustrator:13.0.2:::::::*
	cpe:2.3:a:adobe:illustrator:13.0.3:::::::*
	cpe:2.3:a:adobe:illustrator:14.0:::::::*
	cpe:2.3:a:adobe:illustrator:15.0:::::::*
	cpe:2.3:a:adobe:illustrator_cs5.5::::::::

History

No history.

Information

Published : 2012-05-09 04:36

Updated : 2024-02-28 12:00

NVD link : CVE-2012-2024

Mitre link : CVE-2012-2024

CVE.ORG link : CVE-2012-2024

JSON object : View

Products Affected

adobe

illustrator_cs5.5
illustrator

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2012-2024", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-05-09T04:36:39.197", "references": [{"url": "http://osvdb.org/81756", "source": "psirt@adobe.com"}, {"url": "http://www.adobe.com/support/security/bulletins/apsb12-10.html", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@adobe.com"}, {"url": "http://www.securityfocus.com/bid/53422", "source": "psirt@adobe.com"}, {"url": "http://www.securitytracker.com/id?1027047", "source": "psirt@adobe.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/75447", "source": "psirt@adobe.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2025, and CVE-2012-2026."}, {"lang": "es", "value": "Adobe Illustrator antes de CS6 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n o provocar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) a trav\u00e9s de vectores no especificados, una vulnerabilidad diferente de CVE-2012-0780, CVE-2012-2023, CVE-2012-2025 y CVE-2012-2026."}], "lastModified": "2017-08-29T01:31:27.477", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:illustrator:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "541B9668-6BEB-49BB-9C75-44D2595B2E28"}, {"criteria": "cpe:2.3:a:adobe:illustrator:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88C95931-0247-4605-B2C5-35EB7D654B4C"}, {"criteria": "cpe:2.3:a:adobe:illustrator:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1AA37B5-DE58-4856-9EE8-8FFAF6CC9E1F"}, {"criteria": "cpe:2.3:a:adobe:illustrator:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BF8CE1A-B768-4A77-9A46-8F0158E44D91"}, {"criteria": "cpe:2.3:a:adobe:illustrator:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB73FA7F-36E0-434D-B310-25C587382419"}, {"criteria": "cpe:2.3:a:adobe:illustrator:11.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8873B2F7-3347-4861-AD34-587B3AAEA9D2"}, {"criteria": "cpe:2.3:a:adobe:illustrator:12.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A620585-66A5-4337-9CEF-63880BD754CD"}, {"criteria": "cpe:2.3:a:adobe:illustrator:13.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1AF81AF-6584-46C7-80C7-D5737C22A5F6"}, {"criteria": "cpe:2.3:a:adobe:illustrator:13.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA14D604-E0D4-432B-BEE5-C8B48228C151"}, {"criteria": "cpe:2.3:a:adobe:illustrator:13.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F0BAEE7-5C1E-4620-87D7-786C2637F70D"}, {"criteria": "cpe:2.3:a:adobe:illustrator:13.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47C2B7DA-0115-407E-BCFD-A4B476D6E594"}, {"criteria": "cpe:2.3:a:adobe:illustrator:14.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A639294-7BEA-4963-8F09-63751BC32D91"}, {"criteria": "cpe:2.3:a:adobe:illustrator:15.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "483BD795-610A-4A82-ACBF-8E4EBD4F67E7"}, {"criteria": "cpe:2.3:a:adobe:illustrator_cs5.5:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00D9AAA6-8B2B-4342-B519-6D573010CA14", "versionEndIncluding": "15"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@adobe.com"}