ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/65302

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0301.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securityfocus.com/archive/1/516315/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.vupen.com/english/advisories/2011/0337

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-11-073/

Resource:

x_refsource_MISC

Hyperlink: http://www.securitytracker.com/id?1025033

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12081

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.securityfocus.com/bid/46219

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-03.html

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.vupen.com/english/advisories/2011/0492	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43470	third-party-advisory x_refsource_SECUNIA x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/65302	vdb-entry x_refsource_XF x_transferred
http://www.redhat.com/support/errata/RHSA-2011-0301.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/archive/1/516315/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.vupen.com/english/advisories/2011/0337	vdb-entry x_refsource_VUPEN x_transferred
http://www.zerodayinitiative.com/advisories/ZDI-11-073/	x_refsource_MISC x_transferred
http://www.securitytracker.com/id?1025033	vdb-entry x_refsource_SECTRACK x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12081	vdb-entry signature x_refsource_OVAL x_transferred
http://www.securityfocus.com/bid/46219	vdb-entry x_refsource_BID x_transferred
http://www.adobe.com/support/security/bulletins/apsb11-03.html	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0492

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/65302

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0301.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/516315/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0337

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-11-073/

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.securitytracker.com/id?1025033

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12081

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.securityfocus.com/bid/46219

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-03.html

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:10 Feb, 2011 | 18:00

Updated At:29 Apr, 2026 | 01:13

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*

>>acrobat_reader>>8.0

cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*

>>acrobat_reader>>8.1

cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*

>>acrobat_reader>>8.1.1

cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*

>>acrobat_reader>>8.1.2

cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*

>>acrobat_reader>>8.1.4

cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*

>>acrobat_reader>>8.1.5

cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*

>>acrobat_reader>>8.1.6

cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*

>>acrobat_reader>>8.1.7

cpe:2.3:a:adobe:acrobat_reader:8.2:*:*:*:*:*:*:*

>>acrobat_reader>>8.2

cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*

>>acrobat_reader>>8.2.1

cpe:2.3:a:adobe:acrobat_reader:8.2.2:*:*:*:*:*:*:*

>>acrobat_reader>>8.2.2

cpe:2.3:a:adobe:acrobat_reader:8.2.3:*:*:*:*:*:*:*

>>acrobat_reader>>8.2.3

cpe:2.3:a:adobe:acrobat_reader:8.2.4:*:*:*:*:*:*:*

>>acrobat_reader>>8.2.4

cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*

>>acrobat_reader>>9.0

cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.1

cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.1

cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.2

cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.1.3

cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.2

cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.3

cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.1

cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.2

cpe:2.3:a:adobe:acrobat_reader:9.3.3:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.3

cpe:2.3:a:adobe:acrobat_reader:9.3.4:*:*:*:*:*:*:*

>>acrobat_reader>>9.3.4

cpe:2.3:a:adobe:acrobat_reader:9.4:*:*:*:*:*:*:*

>>acrobat_reader>>9.4

cpe:2.3:a:adobe:acrobat_reader:9.4.1:*:*:*:*:*:*:*

>>acrobat_reader>>9.4.1

cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*

>>acrobat_reader>>10.0

Apple Inc.

>>mac_os_x>>*

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*

>>acrobat>>8.0

cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*

>>acrobat>>8.1

cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*

>>acrobat>>8.1.1

cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*

>>acrobat>>8.1.2

cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*

>>acrobat>>8.1.3

cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*

>>acrobat>>8.1.4

cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*

>>acrobat>>8.1.5

cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*

>>acrobat>>8.1.6

cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*

>>acrobat>>8.1.7

cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*

>>acrobat>>8.2

cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*

>>acrobat>>8.2.1

cpe:2.3:a:adobe:acrobat:8.2.2:*:*:*:*:*:*:*

>>acrobat>>8.2.2

cpe:2.3:a:adobe:acrobat:8.2.3:*:*:*:*:*:*:*

>>acrobat>>8.2.3

cpe:2.3:a:adobe:acrobat:8.2.4:*:*:*:*:*:*:*

>>acrobat>>8.2.4

cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*

>>acrobat>>9.0

cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*

>>acrobat>>9.1

cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*

>>acrobat>>9.1.1

cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*

>>acrobat>>9.1.2

cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*

>>acrobat>>9.1.3

cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*

>>acrobat>>9.2

cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*

>>acrobat>>9.3

Weaknesses

CWE ID	Type	Source
CWE-189	Primary	nvd@nist.gov

CWE ID: CWE-189

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://secunia.com/advisories/43470	psirt@adobe.com	N/A
http://www.adobe.com/support/security/bulletins/apsb11-03.html	psirt@adobe.com	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-0301.html	psirt@adobe.com	N/A
http://www.securityfocus.com/archive/1/516315/100/0/threaded	psirt@adobe.com	N/A
http://www.securityfocus.com/bid/46219	psirt@adobe.com	N/A
http://www.securitytracker.com/id?1025033	psirt@adobe.com	N/A
http://www.vupen.com/english/advisories/2011/0337	psirt@adobe.com	Vendor Advisory
http://www.vupen.com/english/advisories/2011/0492	psirt@adobe.com	N/A
http://www.zerodayinitiative.com/advisories/ZDI-11-073/	psirt@adobe.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/65302	psirt@adobe.com	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12081	psirt@adobe.com	N/A
http://secunia.com/advisories/43470	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.adobe.com/support/security/bulletins/apsb11-03.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2011-0301.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/archive/1/516315/100/0/threaded	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/46219	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1025033	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2011/0337	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.vupen.com/english/advisories/2011/0492	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.zerodayinitiative.com/advisories/ZDI-11-073/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/65302	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12081	af854a3a-2127-422b-91ae-364da2661108	N/A

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-03.html

Source: psirt@adobe.com

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0301.html

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/516315/100/0/threaded

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/46219

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1025033

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0337

Source: psirt@adobe.com

Resource:

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2011/0492

Source: psirt@adobe.com

Resource: N/A

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-11-073/

Source: psirt@adobe.com

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/65302

Source: psirt@adobe.com

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12081

Source: psirt@adobe.com

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb11-03.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-0301.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/archive/1/516315/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/46219

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securitytracker.com/id?1025033

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0337

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2011/0492

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-11-073/

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/65302

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12081

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

4671Records found

CVE-2012-0633

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and APPLE-SA-2012-03-07-2.

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0628

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0682

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.31% / 84.89%

7 Day CHG~0.00%

Published-25 Jul, 2012 | 20:00

Updated-29 Apr, 2026 | 01:13

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.

Vendor-n/a Apple Inc.

Product-safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0619

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0627

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-1644

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-8.24% / 92.28%

7 Day CHG~0.00%

Published-12 Jan, 2021 | 19:41

Updated-08 Oct, 2024 | 17:15

HEVC Video Extensions Remote Code Execution Vulnerability

Vendor-Microsoft Corporation

Product-hevc_video_extensions HEVC Video Extensions

CVE-2012-0015

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-56.28% / 98.13%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."

Product-windows_7 windows_server_2008 windows_vista windows_xp .net_framework windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0171

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-53.20% / 97.99%

7 Day CHG~0.00%

Published-10 Apr, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "SelectAll Remote Code Execution Vulnerability."

Product-internet_explorer windows_7 windows_server_2008 windows_vista windows_xp windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0630

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0663

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-69.62% / 98.68%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TeXML file.

Product-windows quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0668

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.25% / 84.72%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0596

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.79%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0615

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.79%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0677

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-14.60% / 94.53%

7 Day CHG~0.00%

Published-12 Jun, 2012 | 14:00

Updated-29 Apr, 2026 | 01:13

Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist.

Vendor-n/a Apple Inc.

Product-itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0592

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0597

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.79%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0591

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.79%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0629

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0754

Matching Score-8

Matching Score-8

Vendor-n/a Google LLC Oracle Corporation Apple Inc.Microsoft Corporation Adobe Inc.Linux Kernel Organization, Inc

CVSS Score-7.8||HIGH

EPSS-91.54% / 99.68%

7 Day CHG~0.00%

Published-16 Feb, 2012 | 19:00

Updated-21 Apr, 2026 | 21:13

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a Flash Player

CWE ID-CWE-787

Out-of-bounds Write

CVE-2012-0606

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.79%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0014

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-52.27% / 97.94%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."

Product-windows_7 mac_os_x windows_server_2008 windows_vista .net_framework windows_xp silverlight windows windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0175

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-46.76% / 97.69%

7 Day CHG~0.00%

Published-10 Jul, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

The Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted name for a (1) file or (2) directory, aka "Command Injection Vulnerability."

Product-windows_7 windows_server_2008 windows_vista windows_xp windows_2003_server windows_server_2003 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0172

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-55.71% / 98.11%

7 Day CHG~0.00%

Published-10 Apr, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code Execution Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0184

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-58.80% / 98.24%

7 Day CHG~0.00%

Published-09 May, 2012 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel SXLI Record Memory Corruption Vulnerability."

Product-office_compatibility_pack office excel_viewer excel n/a

CVE-2012-0169

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-49.45% / 97.82%

7 Day CHG~0.00%

Published-10 Apr, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "JScript9 Remote Code Execution Vulnerability."

Product-internet_explorer windows_vista windows_7 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0150

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-59.76% / 98.28%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in msvcrt.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, aka "Msvcrt.dll Buffer Overflow Vulnerability."

Product-windows_vista windows_7 windows_server_2008 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0163

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-54.12% / 98.04%

7 Day CHG~0.00%

Published-10 Apr, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."

Product-.net_framework n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2012-0665

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.98% / 86.62%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Heap-based buffer overflow in Apple QuickTime before 7.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0137

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-45.10% / 97.63%

7 Day CHG~0.00%

Published-14 Feb, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.

Product-visio_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0669

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.34% / 87.40%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

Product-windows quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0601

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.79%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0612

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.79%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-7079

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.10% / 78.14%

7 Day CHG~0.00%

Published-11 Dec, 2015 | 11:00

Updated-06 May, 2026 | 22:30

dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

Vendor-n/a Apple Inc.

Product-tvos iphone_os n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2012-0625

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0595

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.79%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0683

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.31% / 84.89%

7 Day CHG~0.00%

Published-25 Jul, 2012 | 20:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-safari n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0611

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.79%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0631

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0620

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0604

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.00% / 83.79%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0623

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.84% / 83.09%

7 Day CHG~0.00%

Published-08 Mar, 2012 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.

Product-itunes iphone_os n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0004

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-64.44% / 98.47%

7 Day CHG~0.00%

Published-10 Jan, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll, Qdvd.dll, closed captioning, and the Line21 DirectShow filter, aka "DirectShow Remote Code Execution Vulnerability."

Product-windows_7 windows_server_2008 windows_vista windows_xp windows_server_2003 n/a

CVE-2015-7660

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.38% / 89.05%

7 Day CHG~0.00%

Published-11 Nov, 2015 | 11:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via crafted setMask arguments, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, CVE-2015-8044, and CVE-2015-8046.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-linux_kernel mac_os_x windows iphone_os flash_player air_sdk android air air_sdk_\&_compiler n/a

CVE-2012-0165

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-62.11% / 98.37%

7 Day CHG~0.00%

Published-09 May, 2012 | 00:00

Updated-29 Apr, 2026 | 01:13

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."

Product-windows_vista office windows_server_2008 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2012-0185

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-64.69% / 98.48%

7 Day CHG~0.00%

Published-09 May, 2012 | 00:00

Updated-29 Apr, 2026 | 01:13

Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."

Product-office_compatibility_pack excel_viewer excel n/a

CVE-2012-0265

Matching Score-8

Assigner-Flexera Software LLC

Matching Score-8

Assigner-Flexera Software LLC

CVSS Score-9.3||HIGH

EPSS-4.28% / 88.92%

7 Day CHG~0.00%

Published-16 May, 2012 | 01:00

Updated-29 Apr, 2026 | 01:13

Stack-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pathname for a file.

Product-windows quicktime n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0182

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-50.33% / 97.86%

7 Day CHG~0.00%

Published-09 Oct, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vulnerability."

Product-word n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2012-0018

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-53.67% / 98.01%

7 Day CHG~0.00%

Published-09 May, 2012 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."

Product-visio_viewer n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2012-0162

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-57.60% / 98.18%

7 Day CHG~0.00%

Published-09 May, 2012 | 00:00

Updated-29 Apr, 2026 | 01:13

Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Buffer Allocation Vulnerability."

Product-.net_framework n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-0001

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-51.19% / 97.90%

7 Day CHG~0.00%

Published-10 Jan, 2012 | 21:00

Updated-29 Apr, 2026 | 01:13

The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly load structured exception handling tables, which allows context-dependent attackers to bypass the SafeSEH security feature by leveraging a Visual C++ .NET 2003 application, aka "Windows Kernel SafeSEH Bypass Vulnerability."