CVE-2011-0598 Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code via crafted...
HighCVSS 9.3
EPSS 9.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code via crafted ICC data, a different vulnerability than CVE-2011-0596, CVE-2011-0599, and CVE-2011-0602.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 8.0 | No fix listed |
| Adobe Acrobat Reader | = 8.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.2 | No fix listed |
| Adobe Acrobat Reader | = 8.1.4 | No fix listed |
| Adobe Acrobat Reader | = 8.1.5 | No fix listed |
| Adobe Acrobat Reader | = 8.1.6 | No fix listed |
| Adobe Acrobat Reader | = 8.1.7 | No fix listed |
| Adobe Acrobat Reader | = 8.2 | No fix listed |
| Adobe Acrobat Reader | = 8.2.1 | No fix listed |
| Adobe Acrobat Reader | = 8.2.2 | No fix listed |
| Adobe Acrobat Reader | = 8.2.3 | No fix listed |
| Adobe Acrobat Reader | = 8.2.4 | No fix listed |
| Adobe Acrobat Reader | = 9.0 | No fix listed |
| Adobe Acrobat Reader | = 9.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.2 | No fix listed |
| Adobe Acrobat Reader | = 9.1.3 | No fix listed |
| Adobe Acrobat Reader | = 9.2 | No fix listed |
| Adobe Acrobat Reader | = 9.3 | No fix listed |
| Adobe Acrobat Reader | = 9.3.1 | No fix listed |
| Adobe Acrobat Reader | = 9.3.2 | No fix listed |
| Adobe Acrobat Reader | = 9.3.3 | No fix listed |
| Adobe Acrobat Reader | = 9.3.4 | No fix listed |
| Adobe Acrobat Reader | = 9.4 | No fix listed |
Show 30 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 9.4.1 | No fix listed |
| Adobe Acrobat Reader | = 10.0 | No fix listed |
| Adobe acrobat | = 8.0 | No fix listed |
| Adobe acrobat | = 8.1 | No fix listed |
| Adobe acrobat | = 8.1.1 | No fix listed |
| Adobe acrobat | = 8.1.2 | No fix listed |
| Adobe acrobat | = 8.1.3 | No fix listed |
| Adobe acrobat | = 8.1.4 | No fix listed |
| Adobe acrobat | = 8.1.5 | No fix listed |
| Adobe acrobat | = 8.1.6 | No fix listed |
| Adobe acrobat | = 8.1.7 | No fix listed |
| Adobe acrobat | = 8.2 | No fix listed |
| Adobe acrobat | = 8.2.1 | No fix listed |
| Adobe acrobat | = 8.2.2 | No fix listed |
| Adobe acrobat | = 8.2.3 | No fix listed |
| Adobe acrobat | = 8.2.4 | No fix listed |
| Adobe acrobat | = 9.0 | No fix listed |
| Adobe acrobat | = 9.1 | No fix listed |
| Adobe acrobat | = 9.1.1 | No fix listed |
| Adobe acrobat | = 9.1.2 | No fix listed |
| Adobe acrobat | = 9.1.3 | No fix listed |
| Adobe acrobat | = 9.2 | No fix listed |
| Adobe acrobat | = 9.3 | No fix listed |
| Adobe acrobat | = 9.3.1 | No fix listed |
| Adobe acrobat | = 9.3.2 | No fix listed |
| Adobe acrobat | = 9.3.3 | No fix listed |
| Adobe acrobat | = 9.3.4 | No fix listed |
| Adobe acrobat | = 9.4 | No fix listed |
| Adobe acrobat | = 9.4.1 | No fix listed |
| Adobe acrobat | = 10.0 | No fix listed |
References
- 43470 third-party-advisory
- www.adobe.com patch vendor-advisory
- RHSA-2011:0301 vendor-advisory
- 20110208 ZDI-11-073: Adobe Reader ICC Parsing Remote Code Execution Vulnerability mailing-list
- 46219 vdb-entry
- 1025033 vdb-entry
- ADV-2011-0337 vdb-entry vendor-advisory
- ADV-2011-0492 vdb-entry
- www.zerodayinitiative.com
- adobe-reader-ace-bo(65302) vdb-entry
- oval:org.mitre.oval:def:12081 signature vdb-entry