9.3
CVE-2011-0600
- EPSS 40.13%
- Veröffentlicht 10.02.2011 18:00:58
- Zuletzt bearbeitet 16.06.2026 23:27:43
- Quelle psirt@adobe.com
- CVE-Watchlists
- Unerledigt
LoginThe U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and memory corruption, a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, and CVE-2011-0595.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 40.13% | 0.985 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.adobe.com/support/security/bulletins/apsb11-03.html
http://www.securitytracker.com/id?1025033
http://www.vupen.com/english/advisories/2011/0337
http://secunia.com/advisories/43470
http://www.redhat.com/support/errata/RHSA-2011-0301.html
http://www.vupen.com/english/advisories/2011/0492
http://www.securityfocus.com/archive/1/516316/100/0/threaded
http://www.securityfocus.com/bid/46213
http://www.zerodayinitiative.com/advisories/ZDI-11-074/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12428