CVE-2011-0599 The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code...
HighCVSS 9.3
EPSS 9.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted image that causes an invalid pointer calculation related to 4/8-bit RLE compression, a different vulnerability than CVE-2011-0596, CVE-2011-0598, and CVE-2011-0602.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 8.0 | No fix listed |
| Adobe Acrobat Reader | = 8.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.2 | No fix listed |
| Adobe Acrobat Reader | = 8.1.4 | No fix listed |
| Adobe Acrobat Reader | = 8.1.5 | No fix listed |
| Adobe Acrobat Reader | = 8.1.6 | No fix listed |
| Adobe Acrobat Reader | = 8.1.7 | No fix listed |
| Adobe Acrobat Reader | = 8.2 | No fix listed |
| Adobe Acrobat Reader | = 8.2.1 | No fix listed |
| Adobe Acrobat Reader | = 8.2.2 | No fix listed |
| Adobe Acrobat Reader | = 8.2.3 | No fix listed |
| Adobe Acrobat Reader | = 8.2.4 | No fix listed |
| Adobe Acrobat Reader | = 9.0 | No fix listed |
| Adobe Acrobat Reader | = 9.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.2 | No fix listed |
| Adobe Acrobat Reader | = 9.1.3 | No fix listed |
| Adobe Acrobat Reader | = 9.2 | No fix listed |
| Adobe Acrobat Reader | = 9.3 | No fix listed |
| Adobe Acrobat Reader | = 9.3.1 | No fix listed |
| Adobe Acrobat Reader | = 9.3.2 | No fix listed |
| Adobe Acrobat Reader | = 9.3.3 | No fix listed |
| Adobe Acrobat Reader | = 9.3.4 | No fix listed |
| Adobe Acrobat Reader | = 9.4 | No fix listed |
Show 30 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 9.4.1 | No fix listed |
| Adobe Acrobat Reader | = 10.0 | No fix listed |
| Adobe acrobat | = 8.0 | No fix listed |
| Adobe acrobat | = 8.1 | No fix listed |
| Adobe acrobat | = 8.1.1 | No fix listed |
| Adobe acrobat | = 8.1.2 | No fix listed |
| Adobe acrobat | = 8.1.3 | No fix listed |
| Adobe acrobat | = 8.1.4 | No fix listed |
| Adobe acrobat | = 8.1.5 | No fix listed |
| Adobe acrobat | = 8.1.6 | No fix listed |
| Adobe acrobat | = 8.1.7 | No fix listed |
| Adobe acrobat | = 8.2 | No fix listed |
| Adobe acrobat | = 8.2.1 | No fix listed |
| Adobe acrobat | = 8.2.2 | No fix listed |
| Adobe acrobat | = 8.2.3 | No fix listed |
| Adobe acrobat | = 8.2.4 | No fix listed |
| Adobe acrobat | = 9.0 | No fix listed |
| Adobe acrobat | = 9.1 | No fix listed |
| Adobe acrobat | = 9.1.1 | No fix listed |
| Adobe acrobat | = 9.1.2 | No fix listed |
| Adobe acrobat | = 9.1.3 | No fix listed |
| Adobe acrobat | = 9.2 | No fix listed |
| Adobe acrobat | = 9.3 | No fix listed |
| Adobe acrobat | = 9.3.1 | No fix listed |
| Adobe acrobat | = 9.3.2 | No fix listed |
| Adobe acrobat | = 9.3.3 | No fix listed |
| Adobe acrobat | = 9.3.4 | No fix listed |
| Adobe acrobat | = 9.4 | No fix listed |
| Adobe acrobat | = 9.4.1 | No fix listed |
| Adobe acrobat | = 10.0 | No fix listed |
References
- 43470 third-party-advisory
- www.adobe.com patch vendor-advisory
- RHSA-2011:0301 vendor-advisory
- 20110208 ZDI-11-072: Adobe Reader BMP ColorData Remote Code Execution Vulnerability mailing-list
- 46220 vdb-entry
- 1025033 vdb-entry
- ADV-2011-0337 vdb-entry
- ADV-2011-0492 vdb-entry
- www.zerodayinitiative.com
- oval:org.mitre.oval:def:12424 signature vdb-entry