CVE-2011-2101

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers…

published June 16, 2011

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

⚠️ A crafty crafted document could be your undoing! Adobe Reader and Acrobat have a sneaky script execution flaw that needs your attention. 🔍 Think of it like a restaurant accepting a takeout order without verifying what’s in the bag — if the chef doesn’t check, you could end up with unexpected ingredients that ruin your meal! An attacker could exploit this vulnerability to execute arbitrary code on your system through a seemingly innocent PDF, potentially leading to data loss or unauthorized access. It’s a surprisingly sneaky way for malicious actors to infiltrate your system without you even realizing it.

Put simply

Think of it like a restaurant accepting a takeout order without verifying what’s in the bag — if the chef doesn’t check, you could end up with unexpected ingredients that ruin your meal! This vulnerability allows a crafted document to bypass security checks, enabling cross-document script execution in Adobe Reader and Acrobat versions prior to 8.3, 9.4.5, and 10.1 on Windows and Mac OS X.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on your system through a seemingly innocent PDF, potentially leading to data loss or unauthorized access. It’s a surprisingly sneaky way for malicious actors to infiltrate your system without you even realizing it. To protect yourself, ensure you’re using the latest version of Adobe Reader or Acrobat — upgrade to at least 10.1 or the equivalent for older versions. Regularly check for updates and consider disabling JavaScript in the application settings for an extra layer of protection. You’ve got this! Staying updated is a key step in your security journey. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06965 · 94.1th percentile
Published
2011-06-16T23:00Z
EPSS history
Timeline
  • 16 JUN 23:00Z
    Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers…
    cvelistv5