Common Vulnerabilities and Exposures (CVE)number
CVE-2011-2100 Adobe Acrobat and Reader DLL Loading Arbitrary Code Execution Vulnerability.
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory.
It was patched by Adobe on June 14, 2011.
References and related articles
- APSB11-16 Security updates available for Adobe Reader and Acrobat (Adobe) June 14, 2011
- Microsoft Security Advisory 2269637 Released (Microsoft: DLL preloading attacks post of 21 Aug 2010 )
- Security Focus
