Memory corruption

AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted image that triggers an incorrect pointer calculation, leading t...

Design/Logic Flaw

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability than CVE-2011-0596,...

Buffer overflow

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D U3D file that triggers a buffer overflow during decompression, related to "Texture bmp," a different vulnerabilit...

Code injection

Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-0604...

CVE-2011-0596

The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted 1 height and 2 width values for an RLE8 compressed bitmap, which trigger...

CVE-2011-0567

AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted image that triggers an incorrect pointer calculation, leading t...

CVE-2011-0606

Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors related to a crafted lengt...

CVE-2011-0593

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D U3D file that triggers a buffer overflow during decompression, a different vulnerability than CVE-2011-0590,...

CVE-2011-0562

Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0570 and CVE-2011-0588...

CVE-2011-0563

Adobe Reader and Acrobat are vulnerable in multiple old branches: 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and macOS. The issue allows arbitrary code execution or memory corruption via unspecified vectors and is distinct from CVE-2011-0589 and CVE-2011-0606. Patches e...

CVE-2011-0603

CVE-2011-0603 affects Adobe Reader/Acrobat on Windows and macOS, with affected lines: Adobe Reader/Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6. It allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image. The Co...

CVE-2011-0568

Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors...

CVE-2011-0587

Adobe Reader/Acrobat X 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows or macOS contains a cross-site scripting (XSS) vulnerability. The issue allows a remote attacker to inject arbitrary web script or HTML via unspecified vectors in the viewer. The vulnerability is describe...

CVE-2011-0562

CVE-2011-0562 affects Adobe Reader/Acrobat on Windows (10.x before 10.0.1; 9.x before 9.4.2; 8.x before 8.2.6). Root cause: untrusted search path allowing a Trojan horse DLL in the current working directory to load, enabling local privilege escalation. Remediation: update to Adobe Reader/Acrobat ...

CVE-2011-0563

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0589 and CVE-2011-0606...

CVE-2011-0598

Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code via crafted ICC data, a different vulnerability than CVE-2011-0596, CVE-2011-0599, and CVE-2011-0602...

CVE-2011-0596

Adobe Reader/Acrobat is affected by CVE-2011-0596 due to a heap-based buffer overflow in the bitmap parsing component (RLE_8) of 2d.dll. Affected versions include Windows and macOS: Acrobat/Reader 10.x prior to 10.0.1, 9.x prior to 9.4.2, and 8.x prior to 8.2.6. Exploitation would require process...

CVE-2011-0570

CVE-2011-0570 affects Adobe Reader and Acrobat on Windows, via an untrusted search path that allows local users to gain privileges by placing a Trojan DLL in the current working directory. Affected: Acrobat/Reader 10.x prior to 10.0.1; 9.x prior to 9.4.2; 8.x prior to 8.2.6. Root cause: untrusted...

CVE-2011-0592

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D U3D file that triggers a buffer overflow during decompression, related to "Texture bmp," a different vulnerabilit...