CVE-2011-0598

CRITICAL 9.3CVE-2011-0598 · Published 10/02/2011 · updated 16/06/2026

In short

CVE-2011-0598 is a CRITICAL (CVSS 9.3) vulnerability affecting acrobat (adobe), acrobat reader (adobe).
Chance of exploitation in the next 30 days (EPSS): 9.8%, higher than 95.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
acrobat adobe	`= 10.0= 8.0= 8.1= 8.1.1= 8.1.2= 8.1.3= 8.1.4= 8.1.5= 8.1.6= 8.1.7= 8.2= 8.2.1= 8.2.2= 8.2.3= 8.2.4= 9.0= 9.1= 9.1.1= 9.1.2= 9.1.3= 9.2= 9.3= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.4= 9.4.1`	No fix yet
acrobat reader adobe	`= 10.0= 8.0= 8.1= 8.1.1= 8.1.2= 8.1.4= 8.1.5= 8.1.6= 8.1.7= 8.2= 8.2.1= 8.2.2= 8.2.3= 8.2.4= 9.0= 9.1= 9.1.1= 9.1.2= 9.1.3= 9.2= 9.3= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.4= 9.4.1`	No fix yet

Description

Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code via crafted ICC data, a different vulnerability than CVE-2011-0596, CVE-2011-0599, and CVE-2011-0602.

References

More vulnerabilities in acrobat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

acrobat

adobe

= 10.0= 8.0= 8.1= 8.1.1= 8.1.2= 8.1.3= 8.1.4= 8.1.5= 8.1.6= 8.1.7= 8.2= 8.2.1= 8.2.2= 8.2.3= 8.2.4= 9.0= 9.1= 9.1.1= 9.1.2= 9.1.3= 9.2= 9.3= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.4= 9.4.1

No fix yet

acrobat reader

adobe

= 10.0= 8.0= 8.1= 8.1.1= 8.1.2= 8.1.4= 8.1.5= 8.1.6= 8.1.7= 8.2= 8.2.1= 8.2.2= 8.2.3= 8.2.4= 9.0= 9.1= 9.1.1= 9.1.2= 9.1.3= 9.2= 9.3= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.4= 9.4.1

No fix yet

More vulnerabilities in acrobat

See all →