CVE-2011-2462

2011-12-0719:55:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

832

In Wild

adobe

reader

acrobat

vulnerability

remote attackers

arbitrary code

denial of service

memory corruption

nvd

cve-2011-2462

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.97 High

EPSS

Percentile

99.8%

JSON

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

CPENameOperatorVersion
adobe:acrobat_readeradobe acrobat readerle10.1.1
adobe:acrobat_readeradobe acrobat readereq3.0
adobe:acrobat_readeradobe acrobat readereq3.01
adobe:acrobat_readeradobe acrobat readereq3.02
adobe:acrobat_readeradobe acrobat readereq4.0
adobe:acrobat_readeradobe acrobat readereq4.0.5
adobe:acrobat_readeradobe acrobat readereq4.0.5a
adobe:acrobat_readeradobe acrobat readereq4.0.5c
adobe:acrobat_readeradobe acrobat readereq4.5
adobe:acrobat_readeradobe acrobat readereq5.0

CPE	Name	Operator	Version
adobe:acrobat_reader	adobe acrobat reader	le	10.1.1
adobe:acrobat_reader	adobe acrobat reader	eq	3.0
adobe:acrobat_reader	adobe acrobat reader	eq	3.01
adobe:acrobat_reader	adobe acrobat reader	eq	3.02
adobe:acrobat_reader	adobe acrobat reader	eq	4.0
adobe:acrobat_reader	adobe acrobat reader	eq	4.0.5
adobe:acrobat_reader	adobe acrobat reader	eq	4.0.5a
adobe:acrobat_reader	adobe acrobat reader	eq	4.0.5c
adobe:acrobat_reader	adobe acrobat reader	eq	4.5
adobe:acrobat_reader	adobe acrobat reader	eq	5.0