Vulnerability in U3D component in Adobe Reader and Acrobat
Gravedad: Crítico
Identificadores de CVE : CVE-2011-2462
Fecha recomendada: 09 de diciembre de 2011
Descripción
A critical vulnerability has been identified in the 10.1.1 version of Adobe Reader X and earlier versions for Windows and Macintosh, Adobe Reader 9.4.6 and earlier 9.x versions for UNIX, and Adobe Acrobat X(10.1.1) and earlier versions for Windows and Macintosh. When exploited this vulnerability could cause a crash and potentially allow an attacker to take control of the affected system.
Revelación de la información
Trend Micro Deep Security shields the following vulnerabilities using the specified rules. Trend Micro customers using OfficeScan with the Intrusion Defense Firewall plugin are also protected from attacks using these vulnerabilities.
| Adobe Bulletin ID | Vulnerability ID | Rule Number & Title | Deep Security Pattern Version | Deep Security Pattern Release Date |
|---|---|---|---|---|
| APSA11-04 | CVE-2011-2462 | 1004871 - Adobe Acrobat Reader U3D Component Memory Corruption Vulnerability (CVE-2011-2462) | 11-035 | Dec 13, 2011 |
| APSA11-04 | CVE-2011-2462 | 1004873 - Adobe Acrobat Reader U3D Component Memory Corruption (CVE-2011-2462) | 11-035 | Dec 13, 2011 |
Soluciones
Software y versión afectados
- Adobe Reader X (10.1.1) and earlier 10.x versions for Windows and Macintosh
- Adobe Reader 9.4.6 and earlier 9.x versions for Windows
- Macintosh and UNIX
- Adobe Acrobat X (10.1.1) and earlier 10.x versions for Windows and Macintosh
- Adobe Acrobat 9.4.6 and earlier 9.x versions for Windows and Macintosh
