Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2011-2462

Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

CVSS 9.8 · CriticalBuzz score 52.5KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 52.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 19.5 · diversity 8.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
19.5
6 evidence mentions in the snapshot
Diversity score
8.0
3 sources across 1 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
6 source links · newest first
  • Mandiant APT1 report used as a lure in phishing campaignsHelp Net Security

    Mandiant is warning that two malicious versions of their recently released APT1 report have been detected being used as lures in two distinct email phishing campaigns. The first has been spotted by Symantec, and comes in an email written in Japanese: The attached file – Mandiant.pdf – opens a blank PDF and executes exploit code for a recently patched Adobe Acrobat and Reader remote code execution vulnerability. “From our analysis, the exploit fails to drop … More →

    newswww.helpnetsecurity.comFeb 22, 2013, 7:56 AM
  • Fake Mandiant Chinese Hacking Report Used in Attack CampaignSecurityWeek

    Attackers are taking advantage of public interest in security firm Mandiant’s recent report on state-sponsored hacking by China by using a fake copy of the report as bait for victims.

    newswww.securityweek.comFeb 21, 2013, 5:04 PM
  • Microsoft, Adobe Release Critical Patches; Adobe Introduces JavaScript WhitelistingSecurityWeek

    Microsoft and Adobe Systems released a bevy of patches today to plug security holes in their products. Only one of the month’s seven Microsoft Patch Tuesday bulletins is rated ‘critical’; the others are considered ‘important.’ The critical bulletin covers two vulnerabilities affecting Windows Media Player. If exploited, both could enable an attacker to execute code remotely with the same rights as the local user.

    newswww.securityweek.comJan 10, 2012, 9:15 PM
  • Adobe: Patch Coming For Exploit Used Against Defense FirmsSecurityWeek

    Adobe Systems plans to release a patch Friday to close an Adobe Reader and Acrobat security hole at the center of an attack campaign on the defense industry.

    newswww.securityweek.comDec 15, 2011, 7:35 PM
  • Security Roundup: Lockheed Martin Sounds Alarm on Adobe Reader Zero-Day; Microsoft Patchfest ComingCSO Online

    When Adobe last week issued an advisory about a dangerous zero-day attack based on an unpatched Adobe Reader vulnerability that was being exploited in the wild to try and seize control of both PCs and Macs, it credited Lockheed Martin for sounding the alarm about it. It’s not the first time Lockheed Martin has been […]

    newswww.csoonline.comDec 9, 2011, 3:00 PM
  • Adobe Warns of Critical Zero-Day Vulnerability in Reader and Acrobat, Possibly Targeting Defense FirmsSecurityWeek

    Updated Story: Researchers Confirm Attackers Targeted Defense Firms with Adobe Reader Zero-day

    newswww.securityweek.comDec 6, 2011, 9:17 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence