6.9

CVE-2011-2100

Untrusted search path vulnerability in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AdobeAcrobat Reader Version8.0
   MicrosoftWindows
AdobeAcrobat Reader Version8.1
   MicrosoftWindows
AdobeAcrobat Reader Version8.1.1
   MicrosoftWindows
AdobeAcrobat Reader Version8.1.2
   MicrosoftWindows
AdobeAcrobat Reader Version8.1.3
   MicrosoftWindows
AdobeAcrobat Reader Version8.1.4
   MicrosoftWindows
AdobeAcrobat Reader Version8.1.5
   MicrosoftWindows
AdobeAcrobat Reader Version8.1.6
   MicrosoftWindows
AdobeAcrobat Reader Version8.1.7
   MicrosoftWindows
AdobeAcrobat Reader Version8.2
   MicrosoftWindows
AdobeAcrobat Reader Version8.2.1
   MicrosoftWindows
AdobeAcrobat Reader Version8.2.2
   MicrosoftWindows
AdobeAcrobat Reader Version8.2.3
   MicrosoftWindows
AdobeAcrobat Reader Version8.2.4
   MicrosoftWindows
AdobeAcrobat Reader Version8.2.6
   MicrosoftWindows
AdobeAcrobat Reader Version9.0
   MicrosoftWindows
AdobeAcrobat Reader Version9.1
   MicrosoftWindows
AdobeAcrobat Reader Version9.1.1
   MicrosoftWindows
AdobeAcrobat Reader Version9.1.2
   MicrosoftWindows
AdobeAcrobat Reader Version9.1.3
   MicrosoftWindows
AdobeAcrobat Reader Version9.2
   MicrosoftWindows
AdobeAcrobat Reader Version9.3
   MicrosoftWindows
AdobeAcrobat Reader Version9.3.1
   MicrosoftWindows
AdobeAcrobat Reader Version9.3.2
   MicrosoftWindows
AdobeAcrobat Reader Version9.3.3
   MicrosoftWindows
AdobeAcrobat Reader Version9.3.4
   MicrosoftWindows
AdobeAcrobat Reader Version9.4
   MicrosoftWindows
AdobeAcrobat Reader Version9.4.1
   MicrosoftWindows
AdobeAcrobat Reader Version9.4.2
   MicrosoftWindows
AdobeAcrobat Reader Version9.4.3
   MicrosoftWindows
AdobeAcrobat Reader Version9.4.4
   MicrosoftWindows
AdobeAcrobat Reader Version10.0
   MicrosoftWindows
AdobeAcrobat Reader Version10.0.1
   MicrosoftWindows
AdobeAcrobat Reader Version10.0.2
   MicrosoftWindows
AdobeAcrobat Reader Version10.0.3
   MicrosoftWindows
AdobeAcrobat Version8.0
   MicrosoftWindows
AdobeAcrobat Version8.1
   MicrosoftWindows
AdobeAcrobat Version8.1.1
   MicrosoftWindows
AdobeAcrobat Version8.1.2
   MicrosoftWindows
AdobeAcrobat Version8.1.3
   MicrosoftWindows
AdobeAcrobat Version8.1.4
   MicrosoftWindows
AdobeAcrobat Version8.1.5
   MicrosoftWindows
AdobeAcrobat Version8.1.6
   MicrosoftWindows
AdobeAcrobat Version8.1.7
   MicrosoftWindows
AdobeAcrobat Version8.2
   MicrosoftWindows
AdobeAcrobat Version8.2.1
   MicrosoftWindows
AdobeAcrobat Version8.2.2
   MicrosoftWindows
AdobeAcrobat Version8.2.3
   MicrosoftWindows
AdobeAcrobat Version8.2.4
   MicrosoftWindows
AdobeAcrobat Version8.2.5
   MicrosoftWindows
AdobeAcrobat Version8.2.6
   MicrosoftWindows
AdobeAcrobat Version9.0
   MicrosoftWindows
AdobeAcrobat Version9.1
   MicrosoftWindows
AdobeAcrobat Version9.1.1
   MicrosoftWindows
AdobeAcrobat Version9.1.2
   MicrosoftWindows
AdobeAcrobat Version9.1.3
   MicrosoftWindows
AdobeAcrobat Version9.2
   MicrosoftWindows
AdobeAcrobat Version9.3
   MicrosoftWindows
AdobeAcrobat Version9.3.1
   MicrosoftWindows
AdobeAcrobat Version9.3.2
   MicrosoftWindows
AdobeAcrobat Version9.3.3
   MicrosoftWindows
AdobeAcrobat Version9.3.4
   MicrosoftWindows
AdobeAcrobat Version9.4
   MicrosoftWindows
AdobeAcrobat Version9.4.1
   MicrosoftWindows
AdobeAcrobat Version9.4.2
   MicrosoftWindows
AdobeAcrobat Version9.4.3
   MicrosoftWindows
AdobeAcrobat Version9.4.4
   MicrosoftWindows
AdobeAcrobat Version10.0
   MicrosoftWindows
AdobeAcrobat Version10.0.1
   MicrosoftWindows
AdobeAcrobat Version10.0.2
   MicrosoftWindows
AdobeAcrobat Version10.0.3
   MicrosoftWindows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.74% 0.496
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securitytracker.com/id?1025658
http://www.us-cert.gov/cas/techalerts/TA11-166A.html
US Government Resource
http://www.adobe.com/support/security/bulletins/apsb11-16.html
Patch
Vendor Advisory
http://osvdb.org/73062
http://www.securityfocus.com/bid/48252
https://exchange.xforce.ibmcloud.com/vulnerabilities/68014
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14057