CVE-2011-0600 The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an....
HighCVSS 9.3
EPSS 40.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and memory corruption, a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, and CVE-2011-0595.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 8.0 | No fix listed |
| Adobe Acrobat Reader | = 8.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.2 | No fix listed |
| Adobe Acrobat Reader | = 8.1.4 | No fix listed |
| Adobe Acrobat Reader | = 8.1.5 | No fix listed |
| Adobe Acrobat Reader | = 8.1.6 | No fix listed |
| Adobe Acrobat Reader | = 8.1.7 | No fix listed |
| Adobe Acrobat Reader | = 8.2 | No fix listed |
| Adobe Acrobat Reader | = 8.2.1 | No fix listed |
| Adobe Acrobat Reader | = 8.2.2 | No fix listed |
| Adobe Acrobat Reader | = 8.2.3 | No fix listed |
| Adobe Acrobat Reader | = 8.2.4 | No fix listed |
| Adobe Acrobat Reader | = 9.0 | No fix listed |
| Adobe Acrobat Reader | = 9.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.2 | No fix listed |
| Adobe Acrobat Reader | = 9.1.3 | No fix listed |
| Adobe Acrobat Reader | = 9.2 | No fix listed |
| Adobe Acrobat Reader | = 9.3 | No fix listed |
| Adobe Acrobat Reader | = 9.3.1 | No fix listed |
| Adobe Acrobat Reader | = 9.3.2 | No fix listed |
| Adobe Acrobat Reader | = 9.3.3 | No fix listed |
| Adobe Acrobat Reader | = 9.3.4 | No fix listed |
| Adobe Acrobat Reader | = 9.4 | No fix listed |
Show 30 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 9.4.1 | No fix listed |
| Adobe Acrobat Reader | = 10.0 | No fix listed |
| Adobe acrobat | = 8.0 | No fix listed |
| Adobe acrobat | = 8.1 | No fix listed |
| Adobe acrobat | = 8.1.1 | No fix listed |
| Adobe acrobat | = 8.1.2 | No fix listed |
| Adobe acrobat | = 8.1.3 | No fix listed |
| Adobe acrobat | = 8.1.4 | No fix listed |
| Adobe acrobat | = 8.1.5 | No fix listed |
| Adobe acrobat | = 8.1.6 | No fix listed |
| Adobe acrobat | = 8.1.7 | No fix listed |
| Adobe acrobat | = 8.2 | No fix listed |
| Adobe acrobat | = 8.2.1 | No fix listed |
| Adobe acrobat | = 8.2.2 | No fix listed |
| Adobe acrobat | = 8.2.3 | No fix listed |
| Adobe acrobat | = 8.2.4 | No fix listed |
| Adobe acrobat | = 9.0 | No fix listed |
| Adobe acrobat | = 9.1 | No fix listed |
| Adobe acrobat | = 9.1.1 | No fix listed |
| Adobe acrobat | = 9.1.2 | No fix listed |
| Adobe acrobat | = 9.1.3 | No fix listed |
| Adobe acrobat | = 9.2 | No fix listed |
| Adobe acrobat | = 9.3 | No fix listed |
| Adobe acrobat | = 9.3.1 | No fix listed |
| Adobe acrobat | = 9.3.2 | No fix listed |
| Adobe acrobat | = 9.3.3 | No fix listed |
| Adobe acrobat | = 9.3.4 | No fix listed |
| Adobe acrobat | = 9.4 | No fix listed |
| Adobe acrobat | = 9.4.1 | No fix listed |
| Adobe acrobat | = 10.0 | No fix listed |
References
- 43470 third-party-advisory
- www.adobe.com patch vendor-advisory
- RHSA-2011:0301 vendor-advisory
- 20110208 ZDI-11-074: Adobe Reader u3d Parent Node Count Remote Code Execution Vulnerability mailing-list
- 46213 vdb-entry
- 1025033 vdb-entry
- ADV-2011-0337 vdb-entry vendor-advisory
- ADV-2011-0492 vdb-entry
- www.zerodayinitiative.com
- oval:org.mitre.oval:def:12428 signature vdb-entry