CVE-2011-2462KEV · OVERDUE

Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability

High · published December 7, 2011

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.

1584
days past CISA
deadline
CVSS v3.1
8.8
EPSS
89%
Percentile
99.8
In the wild
Confirmed
What it is

🚨 A sneaky vulnerability in Adobe Reader's U3D component could be your worst nightmare, allowing remote attackers to run rogue code or crash your system! 🔥 Think of it like a magician slipping a hidden trapdoor into your house during a party — guests could wander in and wreak havoc without anyone noticing! If exploited, an attacker could take complete control of your system or bring it to a standstill through memory corruption. This vulnerability is not just theoretical; it was actively exploited in the wild back in December 2011, making it a serious threat that could lead to devastating consequences for unsuspecting users.

Put simply

Think of it like a magician slipping a hidden trapdoor into your house during a party — guests could wander in and wreak havoc without anyone noticing! This unspecified vulnerability in Adobe Reader and Acrobat allows attackers to execute arbitrary code or trigger a denial of service by manipulating the U3D component, exploiting unknown vectors to cause memory corruption.

What to do

If exploited, an attacker could take complete control of your system or bring it to a standstill through memory corruption. This vulnerability is not just theoretical; it was actively exploited in the wild back in December 2011, making it a serious threat that could lead to devastating consequences for unsuspecting users. To protect yourself, patch to the latest version of Adobe Reader or Acrobat immediately. Uninstall older versions like 10.1.1 and 9.x through 9.4.6, and ensure you regularly update your software to defend against potential exploits. You've got this — stay proactive, apply those updates, and keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.88881 · 99.8th percentile
Published
2011-12-07T19:00Z
KEV added
2022-06-08 · due 2022-06-22
EPSS history
Timeline
  • 08 JUN 00:00Z
    Added to CISA KEV — remediate by Jun 22
    kev
  • 07 DEC 19:00Z
    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on…
    cvelistv5