ByteOS

Product

Adobe Acrobat and Reader

Versions

Affected

2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier versions

Problem Types

Type	CWE ID	Description
text	N/A	Untrusted pointer dereference

Type: text

CWE ID: N/A

Description: Untrusted pointer dereference

References

Hyperlink	Resource
http://www.securitytracker.com/id/1041809	vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/bid/105442	vdb-entry x_refsource_BID
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html	x_refsource_CONFIRM
https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/	x_refsource_MISC

Hyperlink: http://www.securitytracker.com/id/1041809

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/105442

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb18-30.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id/1041809	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/bid/105442	vdb-entry x_refsource_BID x_transferred
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html	x_refsource_CONFIRM x_transferred
https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/	x_refsource_MISC x_transferred

Hyperlink: http://www.securitytracker.com/id/1041809

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securityfocus.com/bid/105442

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb18-30.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@adobe.com

Published At:12 Oct, 2018 | 18:29

Updated At:24 Feb, 2020 | 21:15

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*

>>acrobat_dc>>Versions from 15.006.30060(inclusive) to 15.006.30452(inclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*

>>acrobat_dc>>Versions from 15.008.20082(inclusive) to 18.011.20063(inclusive)

cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:classic:*:*:*

>>acrobat_dc>>Versions from 17.011.30059(inclusive) to 17.011.30102(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

>>acrobat_reader_dc>>Versions from 15.006.30060(inclusive) to 15.006.30452(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*

>>acrobat_reader_dc>>Versions from 15.008.20082(inclusive) to 18.011.20063(inclusive)

cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:classic:*:*:*

>>acrobat_reader_dc>>Versions from 17.011.30059(inclusive) to 17.011.30102(inclusive)

Apple Inc.

>>mac_os_x>>-

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>-

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-476	Primary	nvd@nist.gov

CWE ID: CWE-476

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/105442	psirt@adobe.com	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041809	psirt@adobe.com	Third Party Advisory VDB Entry
https://helpx.adobe.com/security/products/acrobat/apsb18-30.html	psirt@adobe.com	Patch Vendor Advisory
https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/	psirt@adobe.com	N/A

Hyperlink: http://www.securityfocus.com/bid/105442

Source: psirt@adobe.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id/1041809

Source: psirt@adobe.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://helpx.adobe.com/security/products/acrobat/apsb18-30.html

Source: psirt@adobe.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://research.checkpoint.com/2018/50-adobe-cves-in-50-days/

Source: psirt@adobe.com

Resource: N/A

Similar CVEs

5522Records found

CVE-2011-0093

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-44.03% / 97.45%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."

Product-visio n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2011-0563

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.80% / 90.16%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0589 and CVE-2011-0606.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0222

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-48.52% / 97.67%

7 Day CHG-10.38%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0586

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-2.90% / 85.83%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X do not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0232

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.31% / 86.73%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0026

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-60.97% / 98.24%

7 Day CHG~0.00%

Published-12 Jan, 2011 | 00:00

Updated-11 Apr, 2025 | 00:51

Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name (DSN) and a crafted szDSN argument, which bypasses a signed comparison and leads to a buffer overflow, aka "DSN Overflow Vulnerability."

Product-windows_7 windows_xp windows_server_2008 windows_data_access_components windows_server_2003 windows_2003_server windows_vista data_access_components n/a

CVE-2011-0663

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-22.52% / 95.63%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Multiple integer overflows in the Microsoft (1) JScript 5.6 through 5.8 and (2) VBScript 5.6 through 5.8 scripting engines allow remote attackers to execute arbitrary code via a crafted web page, aka "Scripting Memory Reallocation Vulnerability."

Product-jscript windows_7 windows_xp vbscript windows_server_2008 windows_server_2003 windows_2003_server windows_vista n/a

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2011-0658

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-31.10% / 96.59%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 20:21

Updated-11 Apr, 2025 | 00:51

Integer underflow in the OLE Automation protocol implementation in VBScript.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted WMF file, aka "OLE Automation Underflow Vulnerability."

Product-windows_7 windows_xp windows_server_2008 windows_server_2003 windows_2003_server windows_vista n/a

CVE-2011-0655

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-66.25% / 98.46%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate TimeColorBehaviorContainer Floating Point records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document containing an invalid record, aka "Floating Point Techno-color Time Bandit RCE Vulnerability."

Product-powerpoint_web_app office office_powerpoint_viewer powerpoint_viewer powerpoint open_xml_file_format_converter office_compatibility_pack n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0607

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-2.57% / 84.97%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, and CVE-2011-0608.

Vendor-n/a Adobe Inc.

Product-flash_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0599

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-12.48% / 93.66%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted image that causes an invalid pointer calculation related to 4/8-bit RLE compression, a different vulnerability than CVE-2011-0596, CVE-2011-0598, and CVE-2011-0602.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0028

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-54.16% / 97.93%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

WordPad in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse fields in Word documents, which allows remote attackers to execute arbitrary code via a crafted .doc file, aka "WordPad Converter Parsing Vulnerability."

Product-windows_server_2003 windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2016-0999

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-46.40% / 97.57%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0987, CVE-2016-0988, CVE-2016-0990, CVE-2016-0991, CVE-2016-0994, CVE-2016-0995, CVE-2016-0996, CVE-2016-0997, CVE-2016-0998, and CVE-2016-1000.

CWE ID-CWE-416

Use After Free

CVE-2011-0560

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-12.48% / 93.66%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.

Vendor-n/a Adobe Inc.

Product-flash_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0591

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.42% / 88.60%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to Texture and rgba, a different vulnerability than CVE-2011-0590, CVE-2011-0592, CVE-2011-0593, CVE-2011-0595, and CVE-2011-0600.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0250

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-5.70% / 90.06%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSS atoms in a QuickTime movie file.

Product-windows_7 quicktime windows_xp windows_vista mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0215

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.34% / 84.23%

7 Day CHG-0.69%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

ImageIO in Apple Safari before 5.0.6 on Windows does not properly address re-entrancy issues, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF file.

Product-windows_7 imageio windows_xp windows_vista safari n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0038

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-27.93% / 96.29%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Untrusted search path vulnerability in Microsoft Internet Explorer 8 might allow local users to gain privileges via a Trojan horse IEShims.dll in the current working directory, as demonstrated by a Desktop directory that contains an HTML file, aka "Internet Explorer Insecure Library Loading Vulnerability."

Product-windows_7 windows_xp windows_server_2008 windows_server_2003 windows_2003_server windows_vista internet_explorer n/a

CVE-2011-0097

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-63.84% / 98.35%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted 400h substream in an Excel file, which triggers a stack-based buffer overflow, aka "Excel Integer Overrun Vulnerability."

Product-office excel_viewer excel open_xml_file_format_converter office_compatibility_pack n/a

CVE-2011-0257

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-84.51% / 99.28%

7 Day CHG-0.24%

Published-15 Aug, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CVE-2011-0216

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-1.31% / 78.97%

7 Day CHG~0.00%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.

Product-windows_7 windows_xp safari windows_vista n/a

CVE-2011-0107

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-51.72% / 97.81%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Office Component Insecure Library Loading Vulnerability."

Product-office n/a

CVE-2011-0620

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.85% / 90.20%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0619, CVE-2011-0621, and CVE-2011-0622.

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Oracle Corporation Apple Inc.Adobe Inc.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0032

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-43.43% / 97.42%

7 Day CHG~0.00%

Published-09 Mar, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Untrusted search path vulnerability in DirectShow in Microsoft Windows Vista SP1 and SP2, Windows 7 Gold and SP1, Windows Server 2008 R2 and R2 SP1, and Windows Media Center TV Pack for Windows Vista allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Digital Video Recording (.dvr-ms), Windows Recorded TV Show (.wtv), or .mpg file, aka "DirectShow Insecure Library Loading Vulnerability."

Product-windows_7 windows_server_2008 windows_vista windows_media_center_tv_pack n/a

CVE-2011-0246

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-4.25% / 88.36%

7 Day CHG~0.00%

Published-04 Aug, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file.

Product-windows_7 windows_xp quicktime windows_vista n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0557

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-13.67% / 94.00%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Adobe Shockwave Player before 11.5.9.620 allows remote attackers to execute arbitrary code via a Director movie with a large count value in 3D assets type 0xFFFFFF45 record, which triggers a "faulty allocation" and memory corruption.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CVE-2011-0573

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-2.57% / 84.97%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.

Vendor-n/a Adobe Inc.

Product-flash_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0105

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-89.42% / 99.53%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data Initialization Vulnerability."

Product-open_xml_file_format_converter office excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0223

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-2.02% / 83.04%

7 Day CHG-0.60%

Published-21 Jul, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Product-windows_7 webkit windows_xp windows_vista safari mac_os_x mac_os_x_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0170

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-8.70% / 92.13%

7 Day CHG~0.00%

Published-03 Mar, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in ImageIO in CoreGraphics in Apple iTunes before 10.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted International Color Consortium (ICC) profile in a JPEG image.

Product-windows windows_7 windows_xp windows_vista itunes n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0036

Matching Score-8

Matching Score-8

CVSS Score-8.1||HIGH

EPSS-17.41% / 94.81%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated users to execute arbitrary code via crafted data, aka "Remote Desktop Protocol (RDP) Elevation of Privilege Vulnerability."

Product-windows_server_2012 windows_8.1 windows_7 windows_10 n/a

CVE-2011-0318

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.53% / 80.60%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0609

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-92.40% / 99.72%

7 Day CHG~0.00%

Published-15 Mar, 2011 | 17:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

CVE-2016-0960

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-8.78% / 92.17%

7 Day CHG~0.00%

Published-12 Mar, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0961, CVE-2016-0962, CVE-2016-0986, CVE-2016-0989, CVE-2016-0992, CVE-2016-1002, and CVE-2016-1005.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4307

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-8.39% / 91.96%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code via unspecified vectors.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-0101

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-48.27% / 97.65%

7 Day CHG~0.00%

Published-09 Mar, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via crafted media content, aka "Windows Media Parsing Remote Code Execution Vulnerability."

Product-windows_7 windows_server_2008 windows_rt_8.1 windows_server_2012 windows_8.1 windows_10 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-4091

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-28.24% / 96.33%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows acrobat_reader acrobat mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4387

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.65% / 85.18%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

The RealAudio codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted audio stream in a RealMedia file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4397

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.62% / 85.11%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in the pnen3260.dll module in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a crafted TIT2 atom in an AAC file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CVE-2016-0979

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.59%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-4306

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.95% / 89.24%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4192.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4588

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-73.59% / 98.76%

7 Day CHG~0.00%

Published-23 Dec, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The WBEMSingleView.ocx ActiveX control 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier allows remote attackers to execute arbitrary code via a crafted argument to the ReleaseContext method, a different vector than CVE-2010-3973, possibly an untrusted pointer dereference.

Product-wmi_administrative_tools n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2016-0973

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-5.73% / 90.10%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Use-after-free vulnerability in the URLRequest object implementation in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allows attackers to execute arbitrary code via a URLLoader.load call, a different vulnerability than CVE-2016-0974, CVE-2016-0975, CVE-2016-0982, CVE-2016-0983, and CVE-2016-0984.

CWE ID-CWE-416

Use After Free

CVE-2010-4009

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-3.33% / 86.78%

7 Day CHG~0.00%

Published-09 Dec, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

Vendor-n/a Apple Inc.

Product-quicktime n/a

CVE-2010-4379

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.30% / 78.94%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to have an unspecified impact via a crafted SIPR file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4376

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.21% / 89.55%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.1, Mac RealPlayer 11.0 through 11.1, and Linux RealPlayer 11.0.2.1744 allows remote attackers to execute arbitrary code via a large Screen Width value in the Screen Descriptor header of a GIF87a file in an RTSP stream.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-realplayer_sp realplayer linux_kernel mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-4384

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.95% / 82.71%

7 Day CHG~0.00%

Published-14 Dec, 2010 | 15:00

Updated-11 Apr, 2025 | 00:51

Array index error in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer Enterprise 2.1.2, Mac RealPlayer 11.0 through 11.1, Linux RealPlayer 11.0.2.1744, and possibly HelixPlayer 1.0.6 and other versions, allows remote attackers to execute arbitrary code via a malformed Media Properties Header (aka MDPR) in a RealMedia file.

Vendor-n/a RealNetworks LLC Apple Inc.Linux Kernel Organization, Inc

Product-linux_kernel realplayer mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2016-0976

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-4.41% / 88.59%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-4195

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-13.25% / 93.89%

7 Day CHG~0.00%

Published-10 Feb, 2011 | 15:00

Updated-11 Apr, 2025 | 00:51

The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.

Vendor-n/a Adobe Inc.

Product-shockwave_player n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-4087

Matching Score-8

Matching Score-8