CVE-2014-0511

Heap-based buffer overflow in Adobe Reader 11.0.06 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.

Score

CVSS 2.0 10.0 Critical

Status

Modified - psirt@adobe.com

Published

2014-03-27

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Acrobat Reader (Adobe)

References

• http://helpx.adobe.com/security/products/reader/apsb14-15.html
• http://twitter.com/thezdi/statuses/443827076580122624
• http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/