ZeroDay Findings
Sign inSign up

Findings

CVE-2011-2462

Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability

Published Dec 7, 2011 · updated Jun 16, 2026 · adobe acrobat

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 7, 2011 · Catalog

    Detected

    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

  2. Jun 8, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jun 22, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

Required action

Apply updates per vendor instructions.

CISA due date Jun 22, 2022

Affected

  • cpe adobe/acrobatversion unspecified
  • cpe adobe/acrobat readerversion unspecified
  • vendor Adobe Reader and Acrobatversion unspecified

Sources

  • CISA KEVCVE-2011-2462

    The Universal 3D (U3D) component in Adobe Reader and Acrobat contains a memory corruption vulnerability which could allow remote attackers to execute code or cause denial-of-service (DoS).

    cisa.gov
  • CVE.orgCVE-2011-2462

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2011-2462

    30-day exploitation probability 88.9%

    first.org
  • Exploit Database18366

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_windows/fileformat/adobe_reader_u3d

    Public module reference (average). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2011-2462

    Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vector

    nvd.nist.gov

References