← CVE Radar
CVE-2011-2462Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.
9.8 CRITICALEPSS 88.58%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 8.8 | HIGH | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jun 22, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2011-2462
- Status
- Analyzed
- Assigner (CNA)
- adobe
- Published
- Dec 7, 2011
- Last modified
- 2026-06-16 23:31 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
adobeacrobat1 version range
- through 10.1.1
adobeacrobat reader2 version ranges
- through 10.1.1
- 9.0 through 9.4.6
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00019.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00020.html
- adobe.com http://www.adobe.com/support/security/advisories/apsa11-04.html
- adobe.com http://www.adobe.com/support/security/bulletins/apsb11-30.html
- adobe.com http://www.adobe.com/support/security/bulletins/apsb12-01.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2012-0011.html
- us-cert.gov http://www.us-cert.gov/cas/techalerts/TA11-350A.html
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14562
- github.com https://github.com/cisagov/vulnrichment/issues/199
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-2462