Live › vulnerability › CVE-2011-2462
Go to dashboardAdobe Reader and Acrobat contain a memory corruption flaw in the Universal 3D (U3D) component. A remote attacker can run code or crash the application by getting a victim to open a crafted file.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Adobe Reader and Acrobat | vendor | – | – |
| adobe acrobat | vendor | <= 10.1.1 | – |
| adobe acrobat reader | vendor | <= 10.1.1 | – |
| adobe acrobat reader | vendor | >= 9.0, <= 9.4.6 | – |
Unknown from the sources.
Apply the Adobe update for Reader and Acrobat per vendor instructions; the sources do not name the fixed version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.
This page as .md · .json · in your agent: get_signal("CVE-2011-2462")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.