CVE-2011-2438: Buffer Overflow
Published Sep 15, 2011
·Updated
Multiple stack-based buffer overflows in the image-parsing library in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors.
Affected Software
74 affected components
Adobe Acrobat reader=8.1.6
Adobe Acrobat reader=10.0
Adobe Acrobat reader=8.2.3
Adobe Acrobat reader=9.4.3
Adobe Acrobat reader=8.2.6
Adobe Acrobat reader=8.2
Adobe Acrobat reader=10.0.3
Adobe Acrobat reader=9.2
Adobe Acrobat reader=8.2.2
Adobe Acrobat reader=9.1
Adobe Acrobat reader=8.2.4
Adobe Acrobat reader=9.1.3
Adobe Acrobat reader=8.0
Adobe Acrobat reader=9.1.2
Adobe Acrobat reader=8.1.5
Adobe Acrobat reader=9.3.3
Adobe Acrobat reader=9.4.2
Adobe Acrobat reader=9.1.1
Adobe Acrobat reader=8.2.1
Adobe Acrobat reader=8.3
Adobe Acrobat reader=8.1.7
Adobe Acrobat reader=8.1.4
Adobe Acrobat reader=9.3.4
Adobe Acrobat reader=8.1.2
Adobe Acrobat reader=9.3
Adobe Acrobat reader=9.0
Adobe Acrobat reader=9.4
Adobe Acrobat reader=8.1.1
Adobe Acrobat reader=9.3.2
Adobe Acrobat reader=8.1
Adobe Acrobat reader=10.0.1
Adobe Acrobat reader=8.1.3
Adobe Acrobat reader=9.4.4
Adobe Acrobat reader=9.3.1
Adobe Acrobat reader=10.0.2
Adobe Acrobat reader=9.4.1
Adobe Acrobat=8.0
Adobe Acrobat=8.1.7
Adobe Acrobat=8.2.1
Adobe Acrobat=9.3.3
Adobe Acrobat=10.1
Adobe Acrobat=8.1.2
Adobe Acrobat=9.4.2
Adobe Acrobat=9.2
Adobe Acrobat=9.1
Adobe Acrobat=10.0
Adobe Acrobat=9.4.3
Adobe Acrobat=8.2.4
Adobe Acrobat=8.1.1
Adobe Acrobat=10.0.3
Adobe Acrobat=9.4.4
Adobe Acrobat=8.2.3
Adobe Acrobat=8.2
Adobe Acrobat=8.1
Adobe Acrobat=9.0
Adobe Acrobat=9.3.4
Adobe Acrobat=8.2.2
Adobe Acrobat=9.4.1
Adobe Acrobat=9.3.2
Adobe Acrobat=9.1.1
Adobe Acrobat=8.1.5
Adobe Acrobat=8.1.4
Adobe Acrobat=9.3.1
Adobe Acrobat=8.2.6
Adobe Acrobat=9.1.2
Adobe Acrobat=10.0.2
Adobe Acrobat=8.1.6
Adobe Acrobat=10.0.1
Adobe Acrobat=9.1.3
Adobe Acrobat=9.4.5
Adobe Acrobat=8.2.5
Adobe Acrobat=8.1.3
Adobe Acrobat=9.4
Adobe Acrobat=9.3
Remediation
Event History
Sep 15, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2438?
CVE-2011-2438 has a critical severity level, allowing attackers to execute arbitrary code.
2
How do I fix CVE-2011-2438?
To fix CVE-2011-2438, users should update Adobe Reader and Acrobat to versions 8.3.1, 9.4.6, or 10.1.1 or later.
3
What versions are affected by CVE-2011-2438?
CVE-2011-2438 affects Adobe Reader and Acrobat versions before 8.3.1, 9.4.6, and 10.1.1.
4
What type of vulnerability is CVE-2011-2438?
CVE-2011-2438 is classified as multiple stack-based buffer overflow vulnerabilities.
5
Can CVE-2011-2438 be exploited remotely?
Yes, CVE-2011-2438 can be exploited remotely through specially crafted files.