CVE-2011-0610: Buffer Overflow

Published May 3, 2011

Updated

The CoolType library in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Affected Software

39 affected components

Adobe Acrobat Reader=9.0

Adobe Acrobat Reader=9.1

Adobe Acrobat Reader=9.1.1

Adobe Acrobat Reader=9.1.2

Adobe Acrobat Reader=9.1.3

Adobe Acrobat Reader=9.2

Adobe Acrobat Reader=9.3

Adobe Acrobat Reader=9.3.0

Adobe Acrobat Reader=9.3.1

Adobe Acrobat Reader=9.3.2

Adobe Acrobat Reader=9.3.3

Adobe Acrobat Reader=9.3.4

Adobe Acrobat Reader=9.4

Adobe Acrobat Reader=9.4.1

Adobe Acrobat Reader=9.4.2

Adobe Acrobat Reader=9.4.3

Adobe Acrobat Reader=10.0

Adobe Acrobat Reader=10.0.1

Microsoft Windows

Adobe Acrobat Reader=10.0.2

Apple iOS and macOS

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat=9.4

Adobe Acrobat=9.4.1

Adobe Acrobat=9.4.2

Adobe Acrobat=9.4.3

Adobe Acrobat=10.0

Adobe Acrobat=10.0.1

Adobe Acrobat=10.0.2

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb11-08.html

Event History

May 3, 2011

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

07:55 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2011-0610?

CVE-2011-0610 is classified as a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2011-0610?

To fix CVE-2011-0610, upgrade Adobe Reader to at least version 9.4.4 for 9.x or 10.0.3 for 10.x.

Which versions are affected by CVE-2011-0610?

CVE-2011-0610 affects Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows and Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X.

Can I still use Adobe Reader if I have CVE-2011-0610?

Using an affected version of Adobe Reader poses a security risk, so it is recommended to update to a secure version immediately.

What are the potential impacts of CVE-2011-0610?

The potential impacts of CVE-2011-0610 include execution of arbitrary code and potentially allowing an attacker to compromise the system.