CVEvulnerability

CVE-2011-0599

9.3 HIGH Published 2011-02-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-02-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted image that causes an invalid pointer calculation related to 4/8-bit RLE compression, a different vulnerability than CVE-2011-0596, CVE-2011-0598, and CVE-2011-0602.

Affected configurations

• adobe acrobat reader 8.0 • adobe acrobat reader 8.1 • adobe acrobat reader 8.1.1 • adobe acrobat reader 8.1.2 • adobe acrobat reader 8.1.4 • adobe acrobat reader 8.1.5 • adobe acrobat reader 8.1.6 • adobe acrobat reader 8.1.7 • adobe acrobat reader 8.2 • adobe acrobat reader 8.2.1 • adobe acrobat reader 8.2.2 • adobe acrobat reader 8.2.3 • adobe acrobat reader 8.2.4 • adobe acrobat reader 9.0 • adobe acrobat reader 9.1 • adobe acrobat reader 9.1.1 • adobe acrobat reader 9.1.2 • adobe acrobat reader 9.1.3 • adobe acrobat reader 9.2 • adobe acrobat reader 9.3 • adobe acrobat reader 9.3.1 • adobe acrobat reader 9.3.2 • adobe acrobat reader 9.3.3 • adobe acrobat reader 9.3.4 • adobe acrobat reader 9.4 • adobe acrobat reader 9.4.1 • adobe acrobat reader 10.0 • adobe acrobat 8.0 • adobe acrobat 8.1 • adobe acrobat 8.1.1 • adobe acrobat 8.1.2 • adobe acrobat 8.1.3 • adobe acrobat 8.1.4 • adobe acrobat 8.1.5 • adobe acrobat 8.1.6 • adobe acrobat 8.1.7 • adobe acrobat 8.2 • adobe acrobat 8.2.1 • adobe acrobat 8.2.2 • adobe acrobat 8.2.3 • adobe acrobat 8.2.4 • adobe acrobat 9.0 • adobe acrobat 9.1 • adobe acrobat 9.1.1 • adobe acrobat 9.1.2 • adobe acrobat 9.1.3 • adobe acrobat 9.2 • adobe acrobat 9.3 • adobe acrobat 9.3.1 • adobe acrobat 9.3.2 • adobe acrobat 9.3.3 • adobe acrobat 9.3.4 • adobe acrobat 9.4 • adobe acrobat 9.4.1 • adobe acrobat 10.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References