CVE-2011-0570: Medium severity adobe acrobat reader notification manager vulnerability

Published Feb 10, 2011

Updated

Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and CVE-2011-0588.

Affected Software

56 affected components

Adobe Acrobat reader=8.0

Adobe Acrobat reader=8.1

Adobe Acrobat reader=8.1.1

Adobe Acrobat reader=8.1.2

Adobe Acrobat reader=8.1.4

Adobe Acrobat reader=8.1.5

Adobe Acrobat reader=8.1.6

Adobe Acrobat reader=8.1.7

Adobe Acrobat reader=8.2

Adobe Acrobat reader=8.2.1

Adobe Acrobat reader=8.2.2

Adobe Acrobat reader=8.2.3

Adobe Acrobat reader=8.2.4

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.1

Adobe Acrobat reader=9.1.2

Adobe Acrobat reader=9.1.3

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.3.1

Adobe Acrobat reader=9.3.2

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.4

Adobe Acrobat reader=9.4.1

Adobe Acrobat reader=10.0

Microsoft Windows

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2

Adobe Acrobat=8.2.1

Adobe Acrobat=8.2.2

Adobe Acrobat=8.2.3

Adobe Acrobat=8.2.4

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=10.0

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb11-03.html

Event History

Feb 10, 2011

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

06:00 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2011-0570?

CVE-2011-0570 is classified as a critical severity vulnerability due to its potential for privilege escalation.

How do I fix CVE-2011-0570?

To remediate CVE-2011-0570, users should upgrade to Adobe Reader and Acrobat versions 10.0.1, 9.4.2, or 8.2.6 or later.

Who is affected by CVE-2011-0570?

CVE-2011-0570 affects Adobe Reader and Acrobat versions prior to 10.0.1, 9.4.2, and 8.2.6 on Windows systems.

What type of vulnerability is CVE-2011-0570?

CVE-2011-0570 is an untrusted search path vulnerability that allows local users to exploit a Trojan horse DLL.

Can I mitigate CVE-2011-0570 if I cannot update immediately?

Mitigation for CVE-2011-0570 can be attempted by ensuring that untrusted DLLs are not placed in the current working directory.