CVE-2011-0599

The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow…

published February 10, 2011

CVSS
—
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

🚨 A clever crafted image could lead to arbitrary code execution in Adobe Reader! Imagine an uninvited guest sneaking into a party through a deceptive invitation. 🎨 This vulnerability is like a counterfeit ticket that allows anyone to waltz into a concert – the system thinks it's legit, but in reality, it opens the door for mischief. Those crafty 4/8-bit RLE compressed images are the ticket in! An attacker could exploit this vulnerability to execute any code on your system, potentially taking full control. This could mean accessing sensitive files, compromising security settings, or even installing malicious software without your consent. Absolutely devastating!

Put simply

This vulnerability is like a counterfeit ticket that allows anyone to waltz into a concert – the system thinks it's legit, but in reality, it opens the door for mischief. Those crafty 4/8-bit RLE compressed images are the ticket in! This flaw in the rt3d.dll Bitmap parsing component allows an attacker to craft a malicious image that causes an invalid pointer calculation. This vulnerability is present in Adobe Reader and Acrobat versions prior to 10.0.1, 9.4.2, and 8.2.6 on both Windows and Mac OS X.

What to do

An attacker could exploit this vulnerability to execute any code on your system, potentially taking full control. This could mean accessing sensitive files, compromising security settings, or even installing malicious software without your consent. Absolutely devastating! To protect yourself, ensure you're running Adobe Reader and Acrobat on the latest versions. Patch updates to 10.0.1, 9.4.2, and 8.2.6 or newer immediately. Regularly check for security updates to keep your software secure! You've got this! By taking these steps, you'll be reinforcing your defenses against this sneaky vulnerability! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09305 · 95.3th percentile
Published
2011-02-10T17:00Z
EPSS history
Timeline
  • 10 FEB 17:00Z
    The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow…
    cvelistv5