CVE-2011-2462

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 CNA

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

88.88% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2022-06-08

Published

2011-12-07

Updated

2025-11-21

Proof-of-concept exploits (3)

• jesparza/peepdf1469★ · 2024-08-19
• qashqao/peepdf0★ · 2018-10-18
• quanyang/ExploitAnalysis1★ · 2016-04-28

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_reader_…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18366

Security advisories

• http://www.adobe.com/support/security/advisories/apsa11-04.html
• http://www.us-cert.gov/cas/techalerts/TA11-350A.html
• cisagov/vulnrichment/issues/199
• http://www.redhat.com/support/errata/RHSA-2012-0011.html

References

• CVE Record
• NVD entry

Related

• CVE-2013-2729
• CVE-2015-5317
• CVE-2016-3427
• CVE-2016-8735