CVEvulnerability

CVE-2011-2462

9.8 CRITICAL Known exploited Published 2011-12-07 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability — Adobe Reader and Acrobat

The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).

Added to KEV: 2022-06-08
Remediation due: 2022-06-22
Ransomware use: Unknown
Required action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2011-2462

Status: Analyzed
Published: 2011-12-07
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 ([email protected]): 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-787

Description

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

Affected configurations

• adobe acrobat (<= 10.1.1) • adobe acrobat reader (<= 10.1.1) • adobe acrobat reader (>= 9.0 <= 9.4.6)

Weakness · CWE (1)

CWE-787 Out-of-bounds Write weakness

References