{"id":"CVE-2011-4369","aliases":["EUVD-2011-4298","GHSA-22rc-rfv9-53mr","RHSA-2012:0011"],"status":"published","title":"Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on...","description":"Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.07519,"percentile":0.94536,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2011-12-16T19:00:00Z","modified":"2026-06-29T10:04:22Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.7-1.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.7-1.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.7-1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.7-1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.7-1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.7-1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.7-1.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.4.7-1.el6"}]}],"bundled":2}],"products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat_reader"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00020.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb12-01.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2012-0011.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00019.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb11-30.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","article"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14865","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA11-350A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/51092","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4369","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-22rc-rfv9-53mr"},{"url":"https://access.redhat.com/errata/RHSA-2012:0011","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=760908","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=768517","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0011.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2462","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2462","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2462","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4369","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4369","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-4369","description":"Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.","status":"published","published":"2011-12-16T19:00:00Z","modified":"2024-08-07T00:09:18.439Z","updated_at":"2026-11-02T14:35:37.671707Z"}],"euvd":[{"id":"EUVD-2011-4298","description":"Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.","status":"published","published":"2011-12-16T19:00:00Z","modified":"2024-08-07T00:09:18Z","updated_at":"2026-11-03T01:39:48.961231Z"}],"ghsa":[{"id":"GHSA-22rc-rfv9-53mr","title":"Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on...","description":"Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.","status":"published","published":"2022-05-17T01:00:10Z","modified":"2023-02-03T05:02:57Z","updated_at":"2026-11-02T14:53:16.236274Z"}],"nvd":[{"id":"CVE-2011-4369","description":"Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.","status":"published","published":"2011-12-16T19:55:00.987Z","modified":"2026-06-16T23:34:51.327Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:11.800512Z"}],"osv":[{"id":"RHSA-2012:0011","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T07:08:29Z","modified":"2026-06-29T10:04:22Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}