CVE-2011-0596

The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow…

published February 10, 2011

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

🚨 A cleverly crafted image could be the key to executing remote code on your Adobe Reader! Think of it like a restaurant that serves meals based on what’s printed on the menu — if the chef uses incorrect measurements for the ingredients, the result could be a disastrous dish that no one wants to eat. An attacker can exploit this vulnerability to run any arbitrary code on your system, potentially leading to full control over your environment! This means they could read your private documents, change your settings, or even install malware — a recipe for chaos!

Put simply

Think of it like a restaurant that serves meals based on what’s printed on the menu — if the chef uses incorrect measurements for the ingredients, the result could be a disastrous dish that no one wants to eat. This vulnerability occurs due to improper parsing of height and width values for RLE_8 compressed bitmaps in the 2d.dll component, triggering a heap-based buffer overflow. It allows remote attackers to execute arbitrary code by sending specially crafted images.

What to do

An attacker can exploit this vulnerability to run any arbitrary code on your system, potentially leading to full control over your environment! This means they could read your private documents, change your settings, or even install malware — a recipe for chaos! To protect yourself, ensure your Adobe Reader and Acrobat are updated to versions 10.0.1, 9.4.2, or 8.2.6 or later. Regularly check for updates and consider implementing strict file handling practices to guard against malicious files. You can tackle this vulnerability head-on! Update your software today, and keep your digital world safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07159 · 94.3th percentile
Published
2011-02-10T17:00Z
EPSS history
Timeline
  • 10 FEB 17:00Z
    The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow…
    cvelistv5