CVE-2011-2438

Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.

Score

CVSS 2.0 9.3 Critical

Status

Modified - psirt@adobe.com

Published

2011-09-15

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Acrobat (Adobe)
• Acrobat Reader (Adobe)

References

• http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00012.html
• http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00013.html
• http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00025.html
• http://www.adobe.com/support/security/bulletins/apsb11-24.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13892