CVE-2011-2101

acroread: multiple code execution flaws (APSB11-16)

Published Jun 16, 2011 CVSS 2.0 · 9.3 Critical EPSS 7.0% KEV · Not listed
Description
Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers to execute arbitrary code via a crafted document, related to a "cross document script execution vulnerability."

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses
  • CWE-94

    Improper Control of Generation of Code ('Code Injection')

Sources

Status
PUBLISHED
Assigner
adobe
Published
Updated
Aug 6, 2024, 10:53 PM
Reserved
May 13, 2011, 12:00 AM
Status
Modified
Published
Jun 16, 2011, 11:55 PM
Modified
Jun 16, 2026, 11:30 PM
Severity
Critical
Public date
Jun 14, 2011, 12:00 AM