CVE-2011-2442: Input Validation
Published Sep 15, 2011
·Updated
Adobe Reader and Acrobat 8.x before 8.3.1, 9.x before 9.4.6, and 10.x before 10.1.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error vulnerability."
Affected Software
74 affected components
Adobe Acrobat reader=8.1.6
Adobe Acrobat reader=10.0
Adobe Acrobat reader=8.2.3
Adobe Acrobat reader=9.4.3
Adobe Acrobat reader=8.2.6
Adobe Acrobat reader=8.2
Adobe Acrobat reader=10.0.3
Adobe Acrobat reader=9.2
Adobe Acrobat reader=8.2.2
Adobe Acrobat reader=9.1
Adobe Acrobat reader=8.2.4
Adobe Acrobat reader=9.1.3
Adobe Acrobat reader=8.0
Adobe Acrobat reader=9.1.2
Adobe Acrobat reader=8.1.5
Adobe Acrobat reader=9.3.3
Adobe Acrobat reader=9.4.2
Adobe Acrobat reader=9.1.1
Adobe Acrobat reader=8.2.1
Adobe Acrobat reader=8.3
Adobe Acrobat reader=8.1.7
Adobe Acrobat reader=8.1.4
Adobe Acrobat reader=9.3.4
Adobe Acrobat reader=8.1.2
Adobe Acrobat reader=9.3
Adobe Acrobat reader=9.0
Adobe Acrobat reader=9.4
Adobe Acrobat reader=8.1.1
Adobe Acrobat reader=9.3.2
Adobe Acrobat reader=8.1
Adobe Acrobat reader=10.0.1
Adobe Acrobat reader=8.1.3
Adobe Acrobat reader=9.4.4
Adobe Acrobat reader=9.3.1
Adobe Acrobat reader=10.0.2
Adobe Acrobat reader=9.4.1
Adobe Acrobat=8.0
Adobe Acrobat=8.1.7
Adobe Acrobat=8.2.1
Adobe Acrobat=9.3.3
Adobe Acrobat=10.1
Adobe Acrobat=8.1.2
Adobe Acrobat=9.4.2
Adobe Acrobat=9.2
Adobe Acrobat=9.1
Adobe Acrobat=10.0
Adobe Acrobat=9.4.3
Adobe Acrobat=8.2.4
Adobe Acrobat=8.1.1
Adobe Acrobat=10.0.3
Adobe Acrobat=9.4.4
Adobe Acrobat=8.2.3
Adobe Acrobat=8.2
Adobe Acrobat=8.1
Adobe Acrobat=9.0
Adobe Acrobat=9.3.4
Adobe Acrobat=8.2.2
Adobe Acrobat=9.4.1
Adobe Acrobat=9.3.2
Adobe Acrobat=9.1.1
Adobe Acrobat=8.1.5
Adobe Acrobat=8.1.4
Adobe Acrobat=9.3.1
Adobe Acrobat=8.2.6
Adobe Acrobat=9.1.2
Adobe Acrobat=10.0.2
Adobe Acrobat=8.1.6
Adobe Acrobat=10.0.1
Adobe Acrobat=9.1.3
Adobe Acrobat=9.4.5
Adobe Acrobat=8.2.5
Adobe Acrobat=8.1.3
Adobe Acrobat=9.4
Adobe Acrobat=9.3
Remediation
Event History
Sep 15, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2442?
CVE-2011-2442 is considered a critical vulnerability allowing attackers to execute arbitrary code.
2
How do I fix CVE-2011-2442?
To fix CVE-2011-2442, update Adobe Reader and Acrobat to version 8.3.1, 9.4.6, or 10.1.1 or later.
3
Which versions of Adobe Reader are affected by CVE-2011-2442?
CVE-2011-2442 affects Adobe Reader and Acrobat versions prior to 8.3.1, 9.4.6, and 10.1.1.
4
What type of vulnerability is CVE-2011-2442?
CVE-2011-2442 is classified as a logic error vulnerability.
5
Can I use Adobe Reader versions after the fixed versions for CVE-2011-2442 safely?
Yes, using Adobe Reader and Acrobat versions later than 8.3.1, 9.4.6, or 10.1.1 will mitigate the risk associated with CVE-2011-2442.