Vulnerability Description
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Acrobat | <= 10.1.1 |
| Adobe | Acrobat Reader | <= 10.1.1 |
| Apple | Mac Os X | - |
| Microsoft | Windows | - |
| Opengroup | Unix | - |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00019.htmlBroken Link
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00020.htmlBroken Link
- http://www.adobe.com/support/security/advisories/apsa11-04.htmlVendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb11-30.htmlNot Applicable
- http://www.adobe.com/support/security/bulletins/apsb12-01.htmlNot Applicable
- http://www.redhat.com/support/errata/RHSA-2012-0011.htmlBroken Link
- http://www.us-cert.gov/cas/techalerts/TA11-350A.htmlThird Party AdvisoryUS Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00019.htmlBroken Link
- http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00020.htmlBroken Link
- http://www.adobe.com/support/security/advisories/apsa11-04.htmlVendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb11-30.htmlNot Applicable
- http://www.adobe.com/support/security/bulletins/apsb12-01.htmlNot Applicable
- http://www.redhat.com/support/errata/RHSA-2012-0011.htmlBroken Link
- http://www.us-cert.gov/cas/techalerts/TA11-350A.htmlThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2011-2462?
CVE-2011-2462 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute ar...
How severe is CVE-2011-2462?
CVE-2011-2462 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2011-2462?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Acrobat, Adobe Acrobat Reader, Apple Mac Os X, Microsoft Windows, Opengroup Unix.