Release date: December 16, 2011
Last updated: January 10, 2012
Vulnerability identifier: APSB11-30
CVE number: CVE-2011-2462, CVE-2011-4369
Platform: Windows, Macintosh and Linux
There have been reports of two critical vulnerabilities being actively exploited in limited, targeted attacks in the wild against Adobe Reader 9.x on Windows. These vulnerabilities (CVE-2011-2462, referenced in Security Advisory APSA11-04, and CVE-2011-4369) could cause a crash and potentially allow an attacker to take control of the affected system.
Adobe Reader X Protected Mode and Adobe Acrobat X Protected View would prevent an exploit of the type currently targeting these vulnerabilities (CVE-2011-2462 and CVE-2011-4369) from executing.
Adobe recommends users of Adobe Reader X (10.1.1) and earlier versions for Windows and Macintosh update to Adobe Reader X (10.1.2). Adobe recommends users of Adobe Acrobat X (10.1.1) for Windows and Macintosh update to Adobe Acrobat X (10.1.2). For more information, please refer to Security Bulletin APSB12-01. Adobe recommends users of Adobe Reader 9.4.6 and earlier 9.x versions for Linux update to Adobe Reader 9.4.7.
*Note: Adobe Reader for Android and Adobe Flash Player are not affected by these issues.
Adobe recommends users of Adobe Reader X (10.1.1) and earlier versions for Windows and Macintosh update to Adobe Reader X (10.1.2). Adobe recommends users of Adobe Acrobat X (10.1.1) for Windows and Macintosh update to Adobe Acrobat X (10.1.2). For more information, please refer to Security Bulletin APSB12-01.
Adobe Reader 9.x users on Linux can find the appropriate update here:
ftp://ftp.adobe.com/pub/adobe/reader/unix/9.x/.
Adobe categorizes these as critical updates and recommends that users apply the latest updates for their product installations by following the instructions in the "Solution" section above.
There have been reports of two critical vulnerabilities being actively exploited in limited, targeted attacks in the wild against Adobe Reader 9.x on Windows. These vulnerabilities (CVE-2011-2462, referenced in Security Advisory APSA11-04, and CVE-2011-4369) could cause a crash and potentially allow an attacker to take control of the affected system.
Adobe Reader X Protected Mode and Adobe Acrobat X Protected View would prevent an exploit of the type currently targeting these vulnerabilities (CVE-2011-2462 and CVE-2011-4369) from executing.
Adobe recommends users of Adobe Reader X (10.1.1) and earlier versions for Windows and Macintosh update to Adobe Reader X (10.1.2). Adobe recommends users of Adobe Acrobat X (10.1.1) for Windows and Macintosh update to Adobe Acrobat X (10.1.2). For more information, please refer to Security Bulletin APSB12-01. Adobe recommends users of Adobe Reader 9.4.6 and earlier 9.x versions for Linux update to Adobe Reader 9.4.7.
These updates resolve a memory corruption vulnerability in the U3D component that could lead to code execution (CVE-2011-2462).
These updates resolve a memory corruption vulnerability in the PRC component that could lead to code execution (CVE-2011-4369).
The Adobe Reader and Acrobat for Windows and Macintosh updates also incorporate the Adobe Flash Player update as noted in Security Bulletin APSB11-28.
Adobe would like to thank Lockheed Martin CIRT, MITRE and members of the Defense Security Information Exchange for reporting these issues and for working with Adobe to help protect our customers.
January 10, 2012 - Added information on Security Bulletin APSB12-01 and information on Linux version.
December 16, 2011 - Bulletin released.
