What is the CVSS score of CVE-2011-4369?

CVE-2011-4369 has a CVSS 2.0 base score of 10.0 (Critical). CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 18.7%.

Which versions of Adobe Reader and Acrobat are affected by CVE-2011-4369?

Adobe Reader and Acrobat versions 9.x through 10.x contain a critical memory corruption vulnerability in the PRC component that enables remote code execution through malicious PDF documents without…. A patch is available.

Is there a public PoC exploit available for CVE-2011-4369?

Yes, a public proof-of-concept exploit is available for CVE-2011-4369. Prioritise patching immediately. EPSS: 18.7%.

How to fix or mitigate CVE-2011-4369?

Within 24 hours: Identify and inventory all Adobe Reader and Acrobat 9.x-10.x installations across enterprise endpoints using asset management tools; disable or restrict PDF handling in email and web browsers as interim measure. Within 7 days: Deploy vendor-released patches to Adobe Reader and Acrobat to versions 10.1.3 or later (for 10.x branch) or 9.5.3 or later (for 9.x branch); verify patch deployment across 100% of affected systems. Within 30 days: Conduct post-patch validation testing; establish configuration baseline requiring automatic updates for Adobe products; implement application whitelisting controls for Reader/Acrobat processes.

Adobe Reader and Acrobat CVE-2011-4369

CRITICAL

2011-12-16 psirt@adobe.com

Denial Of Service Buffer Overflow Adobe Microsoft RCE

10.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

Analysis Updated

Apr 29, 2026 - 01:42 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Apr 29, 2026 - 01:40 vuln.today

cvss_changed

Analysis Generated

Mar 26, 2026 - 11:18 vuln.today

Patch released

Apr 11, 2025 - 00:51 nvd

Patch available

CVE Published

Dec 16, 2011 - 19:55 nvd

CRITICAL 10.0

DescriptionCVE.org

Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

AnalysisAI

Memory corruption in Adobe Reader and Acrobat 9.x-10.x PRC component allows remote code execution via malicious PDF documents, confirmed actively exploited (CISA KEV) in December 2011. Affects Windows, Mac OS X, and UNIX platforms across multiple product versions. CVSS 10.0 with network vector and no authentication required, combined with 18.73% EPSS score (95th percentile) and confirmed exploitation, makes this a critical priority requiring immediate patching despite the vulnerability's age.

Technical ContextAI

The PRC (Product Representation Compact) component is Adobe's 3D content handler used for processing embedded 3D models and objects within PDF files. This vulnerability represents a memory corruption flaw in how the PRC parser processes specially crafted data structures. The CPE strings identify affected versions spanning Adobe Acrobat 9.0 through 9.3.3 and Reader 9.x through 10.1.1 across Windows, Mac OS X, and UNIX platforms. Memory corruption vulnerabilities in document parsers are particularly dangerous because they can be triggered simply by opening a malicious file, requiring no additional user interaction beyond the initial document access. The PRC format's complexity makes it an attractive target for attackers seeking to embed exploits in seemingly legitimate PDF documents.

RemediationAI

Upgrade immediately to Adobe Reader and Acrobat 9.4.7 (for 9.x branch) or 10.1.2 (for 10.x branch) as specified in Adobe security bulletins APSB11-30 and APSB12-01 available at http://www.adobe.com/support/security/bulletins/. Red Hat issued RHSA-2012-0011 and SUSE published security advisories in January 2012 with distribution-specific patches. If immediate patching is impossible, disable JavaScript in Adobe Reader/Acrobat (Edit > Preferences > JavaScript > uncheck Enable Acrobat JavaScript) which mitigates many PDF exploitation techniques though may break legitimate interactive PDF features. Deploy Protected Mode/View where available to sandbox Reader processes, reducing impact of successful exploitation. Configure email gateways to quarantine PDFs with embedded 3D content until patching completes, though this blocks legitimate 3D engineering documents. Block network-level access to Adobe update servers only after confirming patches are deployed via enterprise distribution, as automatic updates provide critical security value.

More in Adobe

View all

CVE-2015-5119 CRITICAL Act Now POC

9.8 Jul 08

Remote code execution in Adobe Flash Player 11.x through 18.x allows unauthenticated network attackers to execute arbitr

CVE-2016-4117 CRITICAL Emergency POC

9.8 May 11

Remote code execution in Adobe Flash Player 21.0.0.226 and earlier allows unauthenticated network attackers to execute a

CVE-2015-3113 CRITICAL Act Now POC

9.8 Jun 23

Adobe Flash Player contains a heap-based buffer overflow that allows remote code execution, exploited as a zero-day in J

CVE-2011-2462 CRITICAL Emergency POC

9.8 Dec 07

Adobe Reader and Acrobat contain an unspecified U3D component vulnerability causing memory corruption that allows remote

CVE-2011-0611 HIGH Act Now POC

8.8 Apr 13

Adobe Flash Player contains a type confusion vulnerability in object handling that allows remote attackers to execute ar

CVE-2009-0927 HIGH Act Now POC

8.8 Mar 19

Adobe Reader and Acrobat 9.x, 8.x, and 7.x contain a stack-based buffer overflow in the getIcon method of the Collab obj

CVE-2014-0497 CRITICAL Act Now POC

9.8 Feb 05

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Ma

CVE-2009-4324 HIGH Act Now POC

7.8 Dec 15

Adobe Reader and Acrobat contain a use-after-free vulnerability in the Doc.media.newPlayer JavaScript method that was ac

CVE-2015-0313 CRITICAL Act Now POC

9.8 Feb 02

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows

CVE-2015-5122 CRITICAL Emergency POC

9.8 Jul 14

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player

CVE-2015-0311 CRITICAL Act Now POC

9.8 Jan 23

Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Window

CVE-2013-0632 CRITICAL Emergency POC

9.8 Jan 17

administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and pos

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

CVE-2011-4369 vulnerability details – vuln.today

Back