CVE-2011-2438 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Acrobat
Severity
9.3CRITICALNVD
EPSS
8.7%
top 7.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 15
Latest updateMay 17
Description
Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.
CVSS vector
AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0
Affected Packages2 packages
Patches
🔴Vulnerability Details
1GHSA▶
GHSA-c5w9-4xx5-q9r3: Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8↗2022-05-17