CVE-2011-0570

Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and CVE-2011-0588...

CVE-2011-0585

Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0565...

CVE-2011-0586

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X do not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

CVE-2011-0588

Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and CVE-2011-0570...

CVE-2011-0590

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file, a different vulnerability than CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0595, and CVE-2011-0600...

CVE-2011-0591

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D U3D file that triggers a buffer overflow during decompression, related to Texture and rgba, a different...

CVE-2011-0592

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D U3D file that triggers a buffer overflow during decompression, related to "Texture bmp," a different vulnerabilit...

CVE-2011-0593

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D U3D file that triggers a buffer overflow during decompression, a different vulnerability than CVE-2011-0590,...

CVE-2011-0595

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D U3D file that triggers a buffer overflow during decompression, a different vulnerability than CVE-2011-0590,...

CVE-2011-0596

The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted 1 height and 2 width values for an RLE8 compressed bitmap, which trigger...

CVE-2011-0598

Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code via crafted ICC data, a different vulnerability than CVE-2011-0596, CVE-2011-0599, and CVE-2011-0602...

CVE-2011-0600

The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and memory corruption, a...

CVE-2011-0602

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability than CVE-2011-0596,...

CVE-2011-0606

Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors related to a crafted lengt...

CVE-2011-0570

CVE-2011-0570 affects Adobe Reader and Acrobat on Windows, via an untrusted search path that allows local users to gain privileges by placing a Trojan DLL in the current working directory. Affected: Acrobat/Reader 10.x prior to 10.0.1; 9.x prior to 9.4.2; 8.x prior to 8.2.6. Root cause: untrusted...

CVE-2011-0586

CVE-2011-0586 affects Adobe Reader and Acrobat prior to specific 10.x/9.x/8.x releases on Windows and macOS, where input validation is insufficient, allowing arbitrary code execution via unspecified/unknown vectors. Affected versions include: Windows/macOS users of Adobe Reader/Acrobat 10.x befor...

CVE-2011-0590

CVE-2011-0590 impacts Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and macOS. Affects via a crafted 3D file enabling remote code execution. Remediation mentioned in the document: apply updates to 10.0.1, 9.4.2, or 8.2.6 respectively.

CVE-2011-0600

CVE-2011-0600 affects the U3D component in Adobe Reader and Acrobat. On Windows and macOS, vulnerable versions include Acrobat/Reader 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6. The flaw arises from processing a 3D file with an invalid Parent Node count which leads to an incorrect...

CVE-2011-0603

CVE-2011-0603 affects Adobe Reader/Acrobat on Windows and macOS, with affected lines: Adobe Reader/Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6. It allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image. The Co...

CVE-2011-0604

CVE-2011-0604 is an XSS vulnerability in Adobe Reader/Acrobat affecting Windows and macOS: Acrobat/Reader 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6. It allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Mitigation per sources is upgrading to v...