IRONSMITHINTEL
CRITICALCVSS9.8
|
Actively Exploited
|CISA KEV|CVE-2011-2462|Auth: none — unauthenticated|Reboot: required|Manual only

Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability (CVE-2011-2462)

The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).

Published Dec 7, 2011 · Updated May 29, 2026
XLinkedIn
Why patchRisk explained in plain English
Worst-case scenarioIf unpatched

A remote attacker, without authentication, can achieve full data confidentiality loss, arbitrary modification of data, complete denial of service or system unavailability. Federal agencies are required to remediate by 2022-06-22 under CISA BOD 22-01.

How the attack worksNo clicks needed

This is a Out-of-bounds Write (CWE-787) vulnerability in Adobe Reader and Acrobat. Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011. Exploitation requires remote network access, low attack complexity, no authentication required, and no user interaction required.

📧

Phishing link

→

🖼

Malicious file

🔓

Server compromised

Am I affected?Quick check

Probably yes if any of these apply:

●Endpoint Administrators
●IT Security
●Running acrobat: v ≤ 10.1.1; acrobat reader: v ≤ 10.1.1, 9.0 ≤ v ≤ 9.4.6
Real-world incidentsWhat we've seen

CISA added this CVE to the Known Exploited Vulnerabilities catalog on 2022-06-08 based on evidence of active exploitation in the wild. Federal agencies required to remediate by 2022-06-22.

How to patch

Manual remediation steps

Apply the Vendor Patch

This vulnerability is in the CISA Known Exploited Vulnerabilities catalog — apply the vendor's security update as soon as possible.

CISA required action: Apply updates per vendor instructions.

References

    1
    Vendor advisory: http://www.adobe.com/support/security/advisories/apsa11-04.html
    1
    NVD entry: https://nvd.nist.gov/vuln/detail/CVE-2011-2462
    1
    CISA KEV: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-2462
PowerShell automationComing soon

No tested PowerShell script for this entry yet. We’re prioritising automation based on user demand.

References

↗ CVE-2011-2462↗ Advisory

Related vulnerabilities

HIGH

Microsoft 365 Apps Must Be Updated Independently from Windows Update

Microsoft Office

HIGH7.8

Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability (CVE-2023-26369)

Adobe Acrobat and Reader

CVE-2023-26369

HIGH7.8

Adobe Acrobat and Reader Use-After-Free Vulnerability (CVE-2023-21608)

Adobe Acrobat and Reader

CVE-2023-21608