# MA-323.082012: MyCERT Alert - Multiple Critical Vulnerabilities in Adobe Reader and Adobe Acrobat

**Date:** 15 Aug 2012  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-323.082012  
**Advisory ID:** MA-323.082012

---

**1.0 Introduction**
Multiple critical vulnerabilities (CVE-2012-1525, CVE-2012-2049, CVE-2012-2050, CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150, CVE-2012-4151, CVE-2012-4152, CVE-2012-4153, CVE-2012-4154, CVE-2012-4155, CVE-2012-4156, CVE-2012-4157, CVE-2012-4158, CVE-2012-4159, CVE-2012-4160, CVE-2012-4161, CVE-2012-4162) have been identified in Adobe Reader X (10.1.3) and earlier versions for Windows and Macintosh. These vulnerabilities could cause the application to crash and could potentially execute arbitrary code on the affected system. [1]
**2.0 Impact**
These vulnerabilities allow remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat and Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. [1]
**3.0 Affected Products**
Majority of the Adobe Reader and Adobe Acrobat versions are prone to these vulnerabilities. Below is the list of vulnerable products:
- Adobe Reader X (10.1.3) and earlier 10.x versions for Windows and Macintosh.
- Adobe Reader 9.5.1 and earlier 9.x versions for Windows and Macintosh
- Adobe Acrobat X (10.1.3) and earlier 10.x versions for Windows and Macintosh.
- Adobe Acrobat 9.5.1 and earlier 9.x versions for Windows and Macintosh.
**4.0 Recommendations**
Users can utilize the product's update mechanism. The default configuration is set to run automatic update checks on a regular schedule. Update checks can be manually activated by choosing Help > Check for Updates.
For manual update, please refer the following information:
- Adobe Reader users on Windows can also find the appropriate update here:
<http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows>
- Adobe Reader users on Macintosh can also find the appropriate update here:
<http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Macintosh>
- Acrobat Standard and Pro users on Windows can also find the appropriate update here:
<http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows>
- Acrobat Pro Extended users on Windows can also find the appropriate update here:
<http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows>
- Acrobat Pro users on Macintosh can also find the appropriate update here:
<http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh>
MyCERT advises users of the products mentioned in this advisory to keep themselves updated with the latest security announcements from the products’ vendor. MyCERT can be reached through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#4825312b2d3a3c0825312b2d3a3c66273a2f662531)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
1. <http://www.adobe.com/support/security/bulletins/apsb12-16.html>