CVE-2011-4371 — Out-of-bounds Write in Adobe Acrobat

CWE-787 — Out-of-bounds Write5 documents5 sources
Severity
7.5HIGHNVD
EPSS
2.9%
top 13.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe AcrobatAdobe Reader
Timeline
PublishedJan 10
Latest updateMay 13

Description

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDadobe/reader10.1.1+4
▶NVDadobe/acrobat10.1.1+4

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-prc9-4jhw-9h6r: Adobe Reader and Acrobat before 9↗2022-05-13
▶
CVEList
CVE-2011-4371: Adobe Reader and Acrobat before 9↗2012-01-10
▶

📋Vendor Advisories

1
Red Hat
acroread: multiple unspecified flaws (APSB12-08, APSB12-01)↗2012-04-05
▶

💬Community

1
Bugzilla
CVE-2011-4370 CVE-2011-4371 CVE-2011-4372 CVE-2011-4373 CVE-2012-0774 CVE-2012-0775 CVE-2012-0777 acroread: multiple unspecified flaws (APSB12-08, APSB12-01)↗2012-04-05
▶
CVE-2011-4371 — Out-of-bounds Write in Adobe Acrobat | cvebase