CVE-2011-2093

Published: Jun 16, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service via unspecified vectors, related to a "complex object graph vulnerability."

Affected (14)

Products: Adobe: Blazeds, Livecycle Data Services, Livecycle

Adobe

3 products

Blazeds

Livecycle Data Services

Livecycle

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Adobe Blazeds	Up to 4.0.1

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Adobe Livecycle Data Services	Up to 3.1
Adobe Livecycle Data Services	Version 2.5.1
Adobe Livecycle Data Services	Version 2.5
Adobe Livecycle Data Services	Version 2.6.1
Adobe Livecycle Data Services	Version 2.6
Adobe Livecycle Data Services	Version 3

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Adobe Livecycle	Up to 9.0.0.2
Adobe Livecycle	Version 6.0
Adobe Livecycle	Version 7.0
Adobe Livecycle	Version 8.0.1.1
Adobe Livecycle	Version 8.0.1.2
Adobe Livecycle	Version 8.0.1
Adobe Livecycle	Version 8.2.1.3