CVE-2011-2100: Medium severity adobe acrobat reader notification manager vulnerability
Published Jun 16, 2011
·Updated
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected Software
72 affected components
Adobe Acrobat reader=8.0
Adobe Acrobat reader=8.1
Adobe Acrobat reader=8.1.1
Adobe Acrobat reader=8.1.2
Adobe Acrobat reader=8.1.3
Adobe Acrobat reader=8.1.4
Adobe Acrobat reader=8.1.5
Adobe Acrobat reader=8.1.6
Adobe Acrobat reader=8.1.7
Adobe Acrobat reader=8.2
Adobe Acrobat reader=8.2.1
Adobe Acrobat reader=8.2.2
Adobe Acrobat reader=8.2.3
Adobe Acrobat reader=8.2.4
Adobe Acrobat reader=8.2.6
Adobe Acrobat reader=9.0
Adobe Acrobat reader=9.1
Adobe Acrobat reader=9.1.1
Adobe Acrobat reader=9.1.2
Adobe Acrobat reader=9.1.3
Adobe Acrobat reader=9.2
Adobe Acrobat reader=9.3
Adobe Acrobat reader=9.3.1
Adobe Acrobat reader=9.3.2
Adobe Acrobat reader=9.3.3
Adobe Acrobat reader=9.3.4
Adobe Acrobat reader=9.4
Adobe Acrobat reader=9.4.1
Adobe Acrobat reader=9.4.2
Adobe Acrobat reader=9.4.3
Adobe Acrobat reader=9.4.4
Adobe Acrobat reader=10.0
Adobe Acrobat reader=10.0.1
Adobe Acrobat reader=10.0.2
Adobe Acrobat reader=10.0.3
Microsoft Windows
Adobe Acrobat=8.0
Adobe Acrobat=8.1
Adobe Acrobat=8.1.1
Adobe Acrobat=8.1.2
Adobe Acrobat=8.1.3
Adobe Acrobat=8.1.4
Adobe Acrobat=8.1.5
Adobe Acrobat=8.1.6
Adobe Acrobat=8.1.7
Adobe Acrobat=8.2
Adobe Acrobat=8.2.1
Adobe Acrobat=8.2.2
Adobe Acrobat=8.2.3
Adobe Acrobat=8.2.4
Adobe Acrobat=8.2.5
Adobe Acrobat=8.2.6
Adobe Acrobat=9.0
Adobe Acrobat=9.1
Adobe Acrobat=9.1.1
Adobe Acrobat=9.1.2
Adobe Acrobat=9.1.3
Adobe Acrobat=9.2
Adobe Acrobat=9.3
Adobe Acrobat=9.3.1
Adobe Acrobat=9.3.2
Adobe Acrobat=9.3.3
Adobe Acrobat=9.3.4
Adobe Acrobat=9.4
Adobe Acrobat=9.4.1
Adobe Acrobat=9.4.2
Adobe Acrobat=9.4.3
Adobe Acrobat=9.4.4
Adobe Acrobat=10.0
Adobe Acrobat=10.0.1
Adobe Acrobat=10.0.2
Adobe Acrobat=10.0.3
Remediation
Event History
Jun 16, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
11:55 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-2100?
CVE-2011-2100 is rated as critical due to the potential for local privilege escalation.
2
How do I fix CVE-2011-2100?
To fix CVE-2011-2100, update Adobe Reader and Acrobat to version 9.4.5 or later, or 10.1 or later.
3
Which versions of Adobe Reader are affected by CVE-2011-2100?
CVE-2011-2100 affects Adobe Reader and Acrobat versions 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows.
4
Can CVE-2011-2100 be exploited remotely?
No, CVE-2011-2100 requires local access to exploit the vulnerability.
5
What type of vulnerability is CVE-2011-2100?
CVE-2011-2100 is an untrusted search path vulnerability which enables local users to gain privileges via a malicious DLL.