CVE-2011-0570

high

Description

Untrusted search path vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2011-0562 and CVE-2011-0588.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12262

https://exchange.xforce.ibmcloud.com/vulnerabilities/65289

http://www.vupen.com/english/advisories/2011/0337

http://www.securitytracker.com/id?1025033

http://www.securityfocus.com/bid/46255

http://www.adobe.com/support/security/bulletins/apsb11-03.html

Details

Source: Mitre, NVD

Published: 2011-02-10

Updated: 2018-10-30

Risk Information

CVSS v2

Base Score: 6.9

Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High