Lucene search

AdobeCVE-2011-4374

HistoryJan 19, 2012 - 7:55 p.m.

CVE-2011-4374

2012-01-1919:55:01

CWE-190

adobe

web.nvd.nist.gov

113

cve-2011-4374

adobe reader

linux

integer overflow

arbitrary code execution

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.003

Percentile

70.2%

JSON

Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd

Node

adobereaderRange8.0–8.3

adobereaderRange10.0–10.1

AND

applemacosMatch-

microsoftwindowsMatch-

Node

adobereaderRange9.0.0–9.4.5

AND

applemacosMatch-

microsoftwindowsMatch-

opengroupunixMatch-

Node

adobeacrobatRange8.0–8.3

adobeacrobatRange9.0–9.4.5

adobeacrobatRange10.0–10.1

AND

applemacosMatch-

microsoftwindowsMatch-

VendorProductVersionCPE
adobereader*cpe:2.3:a:adobe:reader:*:*:*:*:*:*:*:*
applemacos-cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
opengroupunix-cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*
adobeacrobat*cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	reader	*	cpe:2.3:a:adobe:reader::::::::
apple	macos	-	cpe:2.3:o:apple:macos:-:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*
opengroup	unix	-	cpe:2.3:o:opengroup:unix:-:::::::*
adobe	acrobat	*	cpe:2.3:a:adobe:acrobat::::::::