CVE-2011-2438
published 2011-09-15CVE-2011-2438: Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow…
PriorityP348critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
5.94%
92.5th percentile
Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.
Affected
74 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
| adobe | acrobat | — | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat9.3CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
acroread: multiple code execution flaws (APSB11-24)
vendor_redhat·2011-09-13·CVSS 9.3
CVE-2011-2438 [CRITICAL] acroread: multiple code execution flaws (APSB11-24)
acroread: multiple code execution flaws (APSB11-24)
Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.
GHSA
GHSA-c5w9-4xx5-q9r3: Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8
ghsa_unreviewed·2022-05-17
CVE-2011-2438 [HIGH] CWE-119 GHSA-c5w9-4xx5-q9r3: Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8
Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.htmlhttp://www.adobe.com/support/security/bulletins/apsb11-24.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13892http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.htmlhttp://www.adobe.com/support/security/bulletins/apsb11-24.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13892
2011-09-15
Published