PT-2011-3858

CVE-2011-2432

Published

2011-09-15

Updated

2017-09-19

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 8.x through 8.3.0 Adobe Reader and Acrobat versions 9.x through 9.4.5 Adobe Reader and Acrobat versions 10.x through 10.1.0

Description A buffer overflow issue exists in the U3D TIFF Resource of Adobe Reader and Acrobat, allowing attackers to execute arbitrary code via unspecified vectors.

Recommendations For Adobe Reader and Acrobat versions 8.x through 8.3.0, update to version 8.3.1 or later. For Adobe Reader and Acrobat versions 9.x through 9.4.5, update to version 9.4.6 or later. For Adobe Reader and Acrobat versions 10.x through 10.1.0, update to version 10.1.1 or later.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2011-2432

RHSA-2011:1434

RHSA-2011_1434