CVE-2011-2437: Buffer Overflow
Published Sep 15, 2011
·Updated
Heap-based buffer overflow in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2433 and CVE-2011-2434.
Affected Software
74 affected components
Adobe Acrobat reader=8.0
Adobe Acrobat reader=8.1
Adobe Acrobat reader=8.1.1
Adobe Acrobat reader=8.1.2
Adobe Acrobat reader=8.1.3
Adobe Acrobat reader=8.1.4
Adobe Acrobat reader=8.1.5
Adobe Acrobat reader=8.1.6
Adobe Acrobat reader=8.1.7
Adobe Acrobat reader=8.2
Adobe Acrobat reader=8.2.1
Adobe Acrobat reader=8.2.2
Adobe Acrobat reader=8.2.3
Adobe Acrobat reader=8.2.4
Adobe Acrobat reader=8.2.6
Adobe Acrobat reader=8.3
Adobe Acrobat reader=9.0
Adobe Acrobat reader=9.1
Adobe Acrobat reader=9.1.1
Adobe Acrobat reader=9.1.2
Adobe Acrobat reader=9.1.3
Adobe Acrobat reader=9.2
Adobe Acrobat reader=9.3
Adobe Acrobat reader=9.3.1
Adobe Acrobat reader=9.3.2
Adobe Acrobat reader=9.3.3
Adobe Acrobat reader=9.3.4
Adobe Acrobat reader=9.4
Adobe Acrobat reader=9.4.1
Adobe Acrobat reader=9.4.2
Adobe Acrobat reader=9.4.3
Adobe Acrobat reader=9.4.4
Adobe Acrobat reader=10.0
Adobe Acrobat reader=10.0.1
Adobe Acrobat reader=10.0.2
Adobe Acrobat reader=10.0.3
Adobe Acrobat=8.0
Adobe Acrobat=8.1
Adobe Acrobat=8.1.1
Adobe Acrobat=8.1.2
Adobe Acrobat=8.1.3
Adobe Acrobat=8.1.4
Adobe Acrobat=8.1.5
Adobe Acrobat=8.1.6
Adobe Acrobat=8.1.7
Adobe Acrobat=8.2
Adobe Acrobat=8.2.1
Adobe Acrobat=8.2.2
Adobe Acrobat=8.2.3
Adobe Acrobat=8.2.4
Adobe Acrobat=8.2.5
Adobe Acrobat=8.2.6
Adobe Acrobat=9.0
Adobe Acrobat=9.1
Adobe Acrobat=9.1.1
Adobe Acrobat=9.1.2
Adobe Acrobat=9.1.3
Adobe Acrobat=9.2
Adobe Acrobat=9.3
Adobe Acrobat=9.3.1
Adobe Acrobat=9.3.2
Adobe Acrobat=9.3.3
Adobe Acrobat=9.3.4
Adobe Acrobat=9.4
Adobe Acrobat=9.4.1
Adobe Acrobat=9.4.2
Adobe Acrobat=9.4.3
Adobe Acrobat=9.4.4
Adobe Acrobat=9.4.5
Adobe Acrobat=10.0
Adobe Acrobat=10.0.1
Adobe Acrobat=10.0.2
Adobe Acrobat=10.0.3
Adobe Acrobat=10.1
Remediation
Event History
Sep 15, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2437?
CVE-2011-2437 has a severity rating of critical due to the potential for remote code execution.
2
How do I fix CVE-2011-2437?
To fix CVE-2011-2437, update to Adobe Reader and Acrobat version 8.3.1, 9.4.6, or 10.1.1 or later.
3
Which versions of Adobe Reader are affected by CVE-2011-2437?
Adobe Reader versions 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 are affected by CVE-2011-2437.
4
What type of vulnerability is CVE-2011-2437?
CVE-2011-2437 is a heap-based buffer overflow vulnerability.
5
What is the potential impact of CVE-2011-2437?
CVE-2011-2437 allows attackers to execute arbitrary code if exploited.