{"id":"CVE-2011-2462","kind":"vulnerability","aliases":["CVE-2011-2462"],"related":[],"title":"Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS…","description":"Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.","summary":"Adobe Reader and Acrobat contain a memory corruption flaw in the Universal 3D (U3D) component. A remote attacker can run code or crash the application by getting a victim to open a crafted file.","severity":"critical","cvss":10.0,"epss":0.88881,"exploited":true,"exploited_at":"2022-06-08T00:00:00+00:00","products":[{"name":"Adobe Reader and Acrobat","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"adobe acrobat","fixed":[],"affected":"<= 10.1.1","ecosystem":"vendor"},{"name":"adobe acrobat reader","fixed":[],"affected":"<= 10.1.1","ecosystem":"vendor"},{"name":"adobe acrobat reader","fixed":[],"affected":">= 9.0, <= 9.4.6","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["acrobat","adobe-reader","exploited","macos","other","windows"],"not_affected_if":["patched-version"],"how_to_check":null,"fix":"Apply the Adobe update for Reader and Acrobat per vendor instructions; the sources do not name the fixed version.","status":"open","published_at":"2011-12-07T19:55:01+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:12:46+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-23T21:12:46Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Adobe update for Reader and Acrobat per vendor instructions; the sources do not name the fixed version.","reach":"internet","impact":"high","summary":"Adobe Reader and Acrobat contain a memory corruption flaw in the Universal 3D (U3D) component. A remote attacker can run code or crash the application by getting a victim to open a crafted file.","category":"other","who_cares":["adobe-reader","acrobat","windows","macos"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs code on the victim's machine via crafted PDF","analyst_note":"Find the fixed Adobe Reader/Acrobat version and affected version range in Adobe's security bulletin for CVE-2011-2462, and confirm the U3D component is the affected code path.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["patched-version"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000461,"input_tokens":2865,"output_tokens":350,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2011':21A,24A '-2462':22A,25A '10.1.1':12A,91C '2011':134C '3d':58B '9':103C '9.4.6':106C 'acrobat':11A,29A,31A,33A,36A,38B,49B,90C 'adob':8A,40B,46B,87C,101C 'adobe':26A,30A,32A,35A 'adobe-read':39B 'allow':109C 'and':28A 'applic':70B 'arbitrari':114C 'attack':63B,111C 'caus':117C 'code':66B,115C 'compon':6A,60B,85C 'contain':50B 'corrupt':53B,123C 'craft':78B 'crash':68B 'cve':20A,23A 'decemb':133C 'denial':119C 'earlier':14A,93C 'execut':113C 'exploit':42B,128C 'file':79B 'flaw':54B 'get':72B 'mac':18A,97C 'maco':43B 'memori':52B,122C 'open':76B 'os':19A,98C 'reader':9A,27A,34A,37A,41B,47B,88C,102C 'remot':62B,110C 'run':65B 'servic':121C 'u3d':5A,59B,84C 'univers':57B 'unix':108C 'unknown':125C 'unspecifi':1A,80C 'vector':126C 'via':124C 'victim':74B 'vulner':2A,81C 'wild':131C 'window':16A,45B,95C 'x':99C,104C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2011-12-07T19:55:01+00:00","kev":{"dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2011-2462","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2011-2462","severity":null,"published_at":"2022-06-08T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T19:35:23+00:00","note":null},{"source":"epss","external_id":"CVE-2011-2462","url":"https://api.first.org/data/v1/epss?cve=CVE-2011-2462","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2011-2462","url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2462","severity":null,"published_at":"2011-12-07T19:55:01+00:00","modified_at":"2026-06-16T23:31:23+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}