Memory corruption in Adobe Reader and Acrobat 9.x-10.x PRC component allows remote code execution via malicious PDF documents, confirmed actively exploited (CISA KEV) in December 2011. Affects Windows, Mac OS X, and UNIX platforms across multiple product versions. CVSS 10.0 with network vector and no authentication required, combined with 18.73% EPSS score (95th percentile) and confirmed exploitation, makes this a critical priority requiring immediate patching despite the vulnerability's age.
Denial Of Service
Buffer Overflow
Adobe
Microsoft
RCE
NVD
CVSS 2.0
10.0
EPSS
18.7%
Threat
4.6