CVE-2011-0564

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-02-10 · updated 2026-06-16
Weakness: CWE-264

Description

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows use weak permissions for unspecified files, which allows attackers to gain privileges via unknown vectors.

Affected products

Adobe Acrobat for Edge: 8.0, 8.1, 8.1.1, 8.1.2, 8.1.3, 8.1.4 (+22)
Adobe Acrobat Reader: 8.0, 8.1, 8.1.1, 8.1.2, 8.1.4, 8.1.5 (+21)

References

http://www.adobe.com/support/security/bulletins/apsb11-03.html
http://www.securitytracker.com/id?1025033
http://www.vupen.com/english/advisories/2011/0337
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12548
http://www.adobe.com/support/security/bulletins/apsb11-03.html
http://www.securitytracker.com/id?1025033
http://www.vupen.com/english/advisories/2011/0337
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12548

Get alerted when CVE-2011-0564 or the next vulnerability affects your stack