Severity
10.0CRITICAL
EPSS
13.9%
top 5.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMay 9
Latest updateAug 14

Description

Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-0780, CVE-2012-2023, CVE-2012-2024, and CVE-2012-2026.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

NVDadobe/illustrator13 versions+12

Patches

🔴Vulnerability Details

2
GHSA
GHSA-c895-43rw-5x9c: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a di2022-05-17
CVEList
CVE-2012-2025: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a di2012-05-09

💥Exploits & PoCs

1
Exploit-DB
PHP iReport 1.0 - Remote Html Code Injection2012-01-21

📋Vendor Advisories

5
Red Hat
postgresql: PostgreSQL executes arbitrary code in restore operation2025-08-14
Red Hat
kernel: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context2025-02-27
Microsoft
MapUrlToZone Security Feature Bypass Vulnerability2025-01-14
Microsoft
An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.2019-11-12
Microsoft
jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions jQuery d2018-01-09

🕵️Threat Intelligence

2
Bleepingcomputer
Microsoft patches Windows Kernel zero-day exploited since 20232025-03-12
Tenable
Nessus 5.0.2 Available2012-10-10
CVE-2012-2025 (CRITICAL CVSS 10) | Adobe Illustrator before CS6 allows | cvebase.io