Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-0600

high · 9.3

The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file with an invalid Parent Node count that triggers an incorrect size calculation and memory corruption, a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, and CVE-2011-0595.

9.3
CVSS
40.1%
EPSS (exploit prob.)
99th
EPSS percentile
2011-02-10
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
adobeacrobat_reader8.0
adobeacrobat_reader8.1
adobeacrobat_reader8.1.1
adobeacrobat_reader8.1.2
adobeacrobat_reader8.1.4
adobeacrobat_reader8.1.5
adobeacrobat_reader8.1.6
adobeacrobat_reader8.1.7
adobeacrobat_reader8.2
adobeacrobat_reader8.2.1
adobeacrobat_reader8.2.2
adobeacrobat_reader8.2.3
adobeacrobat_reader8.2.4
adobeacrobat_reader9.0
adobeacrobat_reader9.1
adobeacrobat_reader9.1.1
adobeacrobat_reader9.1.2
adobeacrobat_reader9.1.3
adobeacrobat_reader9.2
adobeacrobat_reader9.3
adobeacrobat_reader9.3.1
adobeacrobat_reader9.3.2
adobeacrobat_reader9.3.3
adobeacrobat_reader9.3.4
adobeacrobat_reader9.4
adobeacrobat_reader9.4.1
adobeacrobat_reader10.0
applemac_os_xall versions
microsoftwindowsall versions
adobeacrobat8.0
adobeacrobat8.1
adobeacrobat8.1.1
adobeacrobat8.1.2
adobeacrobat8.1.3
adobeacrobat8.1.4
adobeacrobat8.1.5
adobeacrobat8.1.6
adobeacrobat8.1.7
adobeacrobat8.2
adobeacrobat8.2.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-0600