CVE-2011-0570

2011-02-1018:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2011-0570

adobe reader

acrobat

untrusted search path

windows

privilege escalation

6.1 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.1%

JSON

Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and CVE-2011-0588.

CPENameOperatorVersion
adobe:acrobat_readeradobe acrobat readereq8.0
adobe:acrobat_readeradobe acrobat readereq8.1
adobe:acrobat_readeradobe acrobat readereq8.1.1
adobe:acrobat_readeradobe acrobat readereq8.1.2
adobe:acrobat_readeradobe acrobat readereq8.1.4
adobe:acrobat_readeradobe acrobat readereq8.1.5
adobe:acrobat_readeradobe acrobat readereq8.1.6
adobe:acrobat_readeradobe acrobat readereq8.1.7
adobe:acrobat_readeradobe acrobat readereq8.2
adobe:acrobat_readeradobe acrobat readereq8.2.1

CPE	Name	Operator	Version
adobe:acrobat_reader	adobe acrobat reader	eq	8.0
adobe:acrobat_reader	adobe acrobat reader	eq	8.1
adobe:acrobat_reader	adobe acrobat reader	eq	8.1.1
adobe:acrobat_reader	adobe acrobat reader	eq	8.1.2
adobe:acrobat_reader	adobe acrobat reader	eq	8.1.4
adobe:acrobat_reader	adobe acrobat reader	eq	8.1.5
adobe:acrobat_reader	adobe acrobat reader	eq	8.1.6
adobe:acrobat_reader	adobe acrobat reader	eq	8.1.7
adobe:acrobat_reader	adobe acrobat reader	eq	8.2
adobe:acrobat_reader	adobe acrobat reader	eq	8.2.1