9.3
CVE-2011-0596
- EPSS 7.16%
- Veröffentlicht 10.02.2011 18:00:58
- Zuletzt bearbeitet 16.06.2026 23:27:42
- Quelle psirt@adobe.com
- CVE-Watchlists
- Unerledigt
The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted (1) height and (2) width values for an RLE_8 compressed bitmap, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2011-0598, CVE-2011-0599, and CVE-2011-0602.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.16% | 0.935 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.adobe.com/support/security/bulletins/apsb11-03.html
http://www.securitytracker.com/id?1025033
http://www.vupen.com/english/advisories/2011/0337
http://secunia.com/advisories/43470
http://www.redhat.com/support/errata/RHSA-2011-0301.html
http://www.vupen.com/english/advisories/2011/0492
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11921