HTTP: Adobe Acrobat and Reader PDF Heap Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2. A successful attack could result in arbitrary code execution.

Extended Description

Adobe Acrobat and Reader are prone to a remote memory corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

Affected Products

Adobe acrobat_standard

References

BugTraq: 51351

CVE: CVE-2011-4371

Short Name

HTTP:STC:ADOBE:PDF-HEAP-RCE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Adobe Acrobat and Reader PDF Heap Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?