Vulnerability CVE-2011-4373


Published: 2012-01-10   Modified: 2012-02-13

Description:
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4372.

Type:

CWE-noinfo

Vendor: Adobe
Product: Acrobat 
Version:
9.4.7
9.4.6
9.4.5
9.4.4
9.4.3
9.4.2
9.4.1
9.4
9.3.4
9.3.3
9.3.2
9.3.1
9.3
9.2
9.1.3
9.1.2
9.1.1
9.1
9.0
10.1.1
10.1
10.0.3
10.0.2
10.0.1
10.0
Product: Reader 
Version:
9.4.7
9.4.6
9.4.5
9.4.4
9.4.3
9.4.2
9.4.1
9.4
9.3.4
9.3.3
9.3.2
9.3.1
9.3
9.2
9.1.3
9.1.2
9.1.1
9.1
9.0
10.1.1
10.1
10.0.3
10.0.2
10.0.1
10.0
Product: Adobe reader 
Version:
9.3.4
9.3.3
9.3.2
9.3.1
9.3
9.2
Product: Acrobat reader 
Version:
9.1.3
9.1.2
9.1.1
9.1
9.0

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial

 References:
http://www.adobe.com/support/security/bulletins/apsb12-01.html
http://www.securitytracker.com/id?1026496
http://www.securityfocus.com/bid/51350
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14615

Related CVE
CVE-2018-4916
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intende...
CVE-2018-4915
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. The vulnerability is caused by the computation that writes data past the end of the intende...
CVE-2018-4914
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end o...
CVE-2018-4913
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the XFA engine, rela...
CVE-2018-4912
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end o...
CVE-2018-4911
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the JavaScript API r...
CVE-2018-4910
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability is an instance of a heap overflow vulnerability in the JavaScript engine...
CVE-2018-4909
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end o...

Copyright 2018, cxsecurity.com

 

Back to Top