CVE-2011-0564 — Adobe Acrobat vulnerability

CWE-2642 documents2 sources
Severity
9.3CRITICALNVD
EPSS
0.9%
top 24.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe AcrobatAdobe Acrobat Reader
Timeline
PublishedFeb 10
Latest updateMay 14

Description

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows use weak permissions for unspecified files, which allows attackers to gain privileges via unknown vectors.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDadobe/acrobat_reader27 versions+26
▶NVDadobe/acrobat28 versions+27

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-m632-42g2-v3pj: Adobe Reader and Acrobat 10↗2022-05-14
▶
CVE-2011-0564 — Adobe Acrobat vulnerability | cvebase