CVE-2011-0564: Critical severity adobe acrobat reader notification manager vulnerability

Published Feb 10, 2011

Updated

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows use weak permissions for unspecified files, which allows attackers to gain privileges via unknown vectors.

Affected Software

56 affected components

Adobe Acrobat reader=8.0

Adobe Acrobat reader=8.1

Adobe Acrobat reader=8.1.1

Adobe Acrobat reader=8.1.2

Adobe Acrobat reader=8.1.4

Adobe Acrobat reader=8.1.5

Adobe Acrobat reader=8.1.6

Adobe Acrobat reader=8.1.7

Adobe Acrobat reader=8.2

Adobe Acrobat reader=8.2.1

Adobe Acrobat reader=8.2.2

Adobe Acrobat reader=8.2.3

Adobe Acrobat reader=8.2.4

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.1

Adobe Acrobat reader=9.1.2

Adobe Acrobat reader=9.1.3

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.3.1

Adobe Acrobat reader=9.3.2

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.4

Adobe Acrobat reader=9.4.1

Adobe Acrobat reader=10.0

Microsoft Windows

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2

Adobe Acrobat=8.2.1

Adobe Acrobat=8.2.2

Adobe Acrobat=8.2.3

Adobe Acrobat=8.2.4

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=10.0

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb11-03.html

Event History

Feb 10, 2011

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

06:00 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2011-0564?

CVE-2011-0564 is rated as a critical security vulnerability that allows attackers to gain elevated privileges through weak file permissions.

How do I fix CVE-2011-0564?

To fix CVE-2011-0564, update Adobe Reader and Acrobat to the latest versions that are not affected by this vulnerability.

What products are affected by CVE-2011-0564?

CVE-2011-0564 affects Adobe Reader and Acrobat versions 8.x, 9.x, and 10.x prior to their respective updates.

Is CVE-2011-0564 exploitable remotely?

CVE-2011-0564 can be exploited remotely, allowing attackers to gain unauthorized access on affected systems.

What can attackers do with CVE-2011-0564?

Attackers exploiting CVE-2011-0564 can execute arbitrary code with elevated privileges on vulnerable systems.