CVE-2011-2440: Use After Free
Published Sep 15, 2011
·Updated
Use-after-free vulnerability in Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allows attackers to execute arbitrary code via unspecified vectors.
Affected Software
74 affected components
Adobe Acrobat reader=8.0
Adobe Acrobat reader=8.1
Adobe Acrobat reader=8.1.1
Adobe Acrobat reader=8.1.2
Adobe Acrobat reader=8.1.3
Adobe Acrobat reader=8.1.4
Adobe Acrobat reader=8.1.5
Adobe Acrobat reader=8.1.6
Adobe Acrobat reader=8.1.7
Adobe Acrobat reader=8.2
Adobe Acrobat reader=8.2.1
Adobe Acrobat reader=8.2.2
Adobe Acrobat reader=8.2.3
Adobe Acrobat reader=8.2.4
Adobe Acrobat reader=8.2.6
Adobe Acrobat reader=8.3
Adobe Acrobat reader=9.0
Adobe Acrobat reader=9.1
Adobe Acrobat reader=9.1.1
Adobe Acrobat reader=9.1.2
Adobe Acrobat reader=9.1.3
Adobe Acrobat reader=9.2
Adobe Acrobat reader=9.3
Adobe Acrobat reader=9.3.1
Adobe Acrobat reader=9.3.2
Adobe Acrobat reader=9.3.3
Adobe Acrobat reader=9.3.4
Adobe Acrobat reader=9.4
Adobe Acrobat reader=9.4.1
Adobe Acrobat reader=9.4.2
Adobe Acrobat reader=9.4.3
Adobe Acrobat reader=9.4.4
Adobe Acrobat reader=10.0
Adobe Acrobat reader=10.0.1
Adobe Acrobat reader=10.0.2
Adobe Acrobat reader=10.0.3
Adobe Acrobat=8.0
Adobe Acrobat=8.1
Adobe Acrobat=8.1.1
Adobe Acrobat=8.1.2
Adobe Acrobat=8.1.3
Adobe Acrobat=8.1.4
Adobe Acrobat=8.1.5
Adobe Acrobat=8.1.6
Adobe Acrobat=8.1.7
Adobe Acrobat=8.2
Adobe Acrobat=8.2.1
Adobe Acrobat=8.2.2
Adobe Acrobat=8.2.3
Adobe Acrobat=8.2.4
Adobe Acrobat=8.2.5
Adobe Acrobat=8.2.6
Adobe Acrobat=9.0
Adobe Acrobat=9.1
Adobe Acrobat=9.1.1
Adobe Acrobat=9.1.2
Adobe Acrobat=9.1.3
Adobe Acrobat=9.2
Adobe Acrobat=9.3
Adobe Acrobat=9.3.1
Adobe Acrobat=9.3.2
Adobe Acrobat=9.3.3
Adobe Acrobat=9.3.4
Adobe Acrobat=9.4
Adobe Acrobat=9.4.1
Adobe Acrobat=9.4.2
Adobe Acrobat=9.4.3
Adobe Acrobat=9.4.4
Adobe Acrobat=9.4.5
Adobe Acrobat=10.0
Adobe Acrobat=10.0.1
Adobe Acrobat=10.0.2
Adobe Acrobat=10.0.3
Adobe Acrobat=10.1
Remediation
Event History
Sep 15, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2440?
CVE-2011-2440 has a high severity rating due to the potential for arbitrary code execution.
2
How do I fix CVE-2011-2440?
To fix CVE-2011-2440, update Adobe Reader or Acrobat to version 8.3.1, 9.4.6, or 10.1.1 or later.
3
Which versions are affected by CVE-2011-2440?
CVE-2011-2440 affects Adobe Reader and Acrobat versions 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1.
4
What type of vulnerability is CVE-2011-2440?
CVE-2011-2440 is classified as a use-after-free vulnerability.
5
Can CVE-2011-2440 be exploited remotely?
Yes, CVE-2011-2440 can potentially be exploited remotely by attackers through unspecified vectors.