Vulnerability details

CVE-2011-2462

Actively exploited
Adobe Reader and Acrobat
CVSS 3.1
8.8High

Official description

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

CVSS scores

ScoreVersionSourceVector
8.8High 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
No product information recorded.

References and advisories

10
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2011-12-07
Last updated
2025-11-21
State
Published
Assigner (CNA)
adobe
Kolun priority
78 · High

CISA KEV catalog

Date added
2022-06-08
Due date
2022-06-22
Used in ransomware
Unknown

Exploit prediction (EPSS)

88.58%
Probability of exploitation in 30 days
99.7%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
Active
Technical impact
Total

Weaknesses (CWE)

  • CWE-787
    Out-of-bounds Write