CVE-2011-2105

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to cause a denial of service (memory…

published June 16, 2011

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

⚠️ Just a few lines of crafted font data can turn Adobe Reader and Acrobat into a crashing flop! 🌪️ Think of it like a restaurant serving a dish that looks amazing but is secretly spoiled — one bite, and the whole meal is ruined. That’s how these malicious fonts can disrupt your software, causing a denial of service as it struggles to process the bad ingredients. An attacker can exploit this vulnerability to cause memory corruption, leading to service crashes or, in some mysterious cases, other unspecified impacts. While not the most catastrophic scenario, it can certainly leave users in a jam, unable to access their documents.

Put simply

Think of it like a restaurant serving a dish that looks amazing but is secretly spoiled — one bite, and the whole meal is ruined. That’s how these malicious fonts can disrupt your software, causing a denial of service as it struggles to process the bad ingredients. This vulnerability arises in Adobe Reader and Acrobat versions prior to 8.3, 9.4.5, and 10.1, allowing crafted font data to cause memory corruption, which can lead to a denial of service and potential other impacts.

What to do

An attacker can exploit this vulnerability to cause memory corruption, leading to service crashes or, in some mysterious cases, other unspecified impacts. While not the most catastrophic scenario, it can certainly leave users in a jam, unable to access their documents. To protect yourself, ensure that you update Adobe Reader and Acrobat to the latest versions: 8.3, 9.4.5, or 10.1 or later. Regularly check for updates and install security patches as they become available. 🛡️ This is fixable! Update your software, and you’ll have this vulnerability locked down in no time. You've got this! 🎉

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03650 · 89.5th percentile
Published
2011-06-16T23:00Z
EPSS history
Timeline
  • 16 JUN 23:00Z
    Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to cause a denial of service (memory…
    cvelistv5