CVE-2011-0589: Buffer Overflow

Published Feb 10, 2011

Updated

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0563 and CVE-2011-0606.

Affected Software

57 affected components

Adobe Acrobat Reader=8.0

Adobe Acrobat Reader=8.1

Adobe Acrobat Reader=8.1.1

Adobe Acrobat Reader=8.1.2

Adobe Acrobat Reader=8.1.4

Adobe Acrobat Reader=8.1.5

Adobe Acrobat Reader=8.1.6

Adobe Acrobat Reader=8.1.7

Adobe Acrobat Reader=8.2

Adobe Acrobat Reader=8.2.1

Adobe Acrobat Reader=8.2.2

Adobe Acrobat Reader=8.2.3

Adobe Acrobat Reader=8.2.4

Adobe Acrobat Reader=9.0

Adobe Acrobat Reader=9.1

Adobe Acrobat Reader=9.1.1

Adobe Acrobat Reader=9.1.2

Adobe Acrobat Reader=9.1.3

Adobe Acrobat Reader=9.2

Adobe Acrobat Reader=9.3

Adobe Acrobat Reader=9.3.1

Adobe Acrobat Reader=9.3.2

Adobe Acrobat Reader=9.3.3

Adobe Acrobat Reader=9.3.4

Adobe Acrobat Reader=9.4

Adobe Acrobat Reader=9.4.1

Adobe Acrobat Reader=10.0

Apple iOS and macOS

Microsoft Windows

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2

Adobe Acrobat=8.2.1

Adobe Acrobat=8.2.2

Adobe Acrobat=8.2.3

Adobe Acrobat=8.2.4

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=10.0

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb11-03.html

Event History

Feb 10, 2011

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

06:00 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2011-0589?

CVE-2011-0589 is considered to have high severity due to its potential to allow arbitrary code execution and cause denial of service.

How do I fix CVE-2011-0589?

To fix CVE-2011-0589, update Adobe Reader and Acrobat to the latest versions provided by Adobe, specifically 10.x to 10.0.1, 9.x to 9.4.2, or 8.x to 8.2.6.

Which versions of Adobe Reader are affected by CVE-2011-0589?

CVE-2011-0589 affects Adobe Reader versions 8.x before 8.2.6, 9.x before 9.4.2, and 10.x before 10.0.1.

What platforms are affected by CVE-2011-0589?

CVE-2011-0589 affects Adobe Reader and Acrobat on both Windows and Mac OS X platforms.

Is there a workaround for CVE-2011-0589?

The most effective workaround for CVE-2011-0589 is to disable JavaScript in Adobe Reader and Acrobat until the software can be updated.