PT-2011-2477 · Adobe+1 · Acrobat Reader+1

Published 2011-02-08 · Updated 2018-10-30 · CVE-2011-0590

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader (affected versions not specified)

Description The issue concerns remote code execution vulnerabilities related to the handling of specific file formats. One vulnerability is associated with the U3D Texture .iff RLE decompression, and another with the U3D Texture Parser ILBM. No information is provided about the estimated number of potentially affected devices or real-world incidents where these issues were exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-0590

RHSA-2011:0301

RHSA-2011_0301

ZDI-11-066

ZDI-11-077

Affected Products

Acrobat Reader

Red Hat

References · 34

• https://nvd.nist.gov/vuln/detail/CVE-2011-0590 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-066 · Security Note
• http://adobe.com/support/security/bulletins/apsb11-03.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/0337 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0301.html · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-11-077 · Security Note
• https://access.redhat.com/security/cve/CVE-2011-0585 · Note
• https://access.redhat.com/security/cve/CVE-2011-0562 · Note
• https://access.redhat.com/security/cve/CVE-2011-0595 · Note
• https://access.redhat.com/security/cve/CVE-2011-0606 · Note
• https://access.redhat.com/security/cve/CVE-2011-0596 · Note
• https://access.redhat.com/security/cve/CVE-2011-0592 · Note
• https://access.redhat.com/security/cve/CVE-2011-0600 · Note
• https://access.redhat.com/security/cve/CVE-2011-0590 · Note
• https://access.redhat.com/security/cve/CVE-2011-0593 · Note