CVE-2011-2462: Adobe Acrobat and Reader Universal 3D Memory Corruption Vulnerability
The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).
Other sources
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2462?
CVE-2011-2462 has a severity rating that indicates it poses a significant risk for remote code execution or denial-of-service attacks.
How do I fix CVE-2011-2462?
To fix CVE-2011-2462, update Adobe Acrobat and Reader to a version later than 10.1.1 or apply any relevant security patches provided by Adobe.
Which versions are affected by CVE-2011-2462?
CVE-2011-2462 affects Adobe Acrobat and Reader versions 10.1.1 and earlier, as well as versions 9.0 through 9.4.6.
What impact does CVE-2011-2462 have on users?
Users affected by CVE-2011-2462 may experience memory corruption issues leading to potential system crashes or unauthorized code execution.
Is CVE-2011-2462 exploitable remotely?
Yes, CVE-2011-2462 can be exploited remotely, allowing attackers to execute arbitrary code if a user opens a malicious U3D file.