CVE-2011-2462 | BDVDB-2026-48367 Detail
AdobeReader and Acrobat
Description#
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-787 Out-of-bounds Write
References#
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00020.html
- http://www.adobe.com/support/security/bulletins/apsb12-01.html
- http://www.adobe.com/support/security/advisories/apsa11-04.html
- http://www.redhat.com/support/errata/RHSA-2012-0011.html
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00019.html
- http://www.adobe.com/support/security/bulletins/apsb11-30.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14562
- http://www.us-cert.gov/cas/techalerts/TA11-350A.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-2462
- https://github.com/cisagov/vulnrichment/issues/199
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.