CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Adobe Reader and Acrobat U3D Component Memory Corruption Remote Code Execution (CVE-2011-2462)
[Affected Scope] Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (memory corruption) via a specially crafted PDF document containing malicious U3D data
[Mitigation] Apply the official security patches immediately, or disable the vulnerable U3D parsing component (rt3d.dll) as a temporary workaround
Adobe Reader and Acrobat U3D CLODProgressiveMeshDeclaration Out-of-Bounds Write Vulnerability (CVE-2009-3953)
[Affected Scope] Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2, and 7.x before 7.1.4 on Windows and Mac OS X
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document containing malformed U3D data
[Mitigation] Apply the official vendor security patches immediately, or disable 3D/U3D rendering features via registry policies