CVEvulnerability
CVE-2010-1241
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-04-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.
Affected configurations
• adobe acrobat reader 8.0
• adobe acrobat reader 8.1
• adobe acrobat reader 8.1.1
• adobe acrobat reader 8.1.2
• adobe acrobat reader 8.1.4
• adobe acrobat reader 8.1.5
• adobe acrobat reader 8.1.6
• adobe acrobat reader 8.1.7
• adobe acrobat reader 8.2
• adobe acrobat reader 8.2.1
• adobe acrobat reader 9.0
• adobe acrobat reader 9.1
• adobe acrobat reader 9.1.1
• adobe acrobat reader 9.1.2
• adobe acrobat reader 9.1.3
• adobe acrobat reader 9.2
• adobe acrobat reader 9.3
• adobe acrobat reader 9.3.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/ Exploit
- http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html lists.immunitysec.com
- http://www.adobe.com/support/security/bulletins/apsb10-09.html www.adobe.com
- http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li www.blackhat.com
- http://www.securityfocus.com/bid/39227 www.securityfocus.com
- http://www.securityfocus.com/bid/39329 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA10-103C.html US Government Resource
- http://www.vupen.com/english/advisories/2010/0873 Vendor Advisory
- http://www.youtube.com/watch?v=9EVHtY1-0q8 www.youtube.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57589 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940 oval.cisecurity.org
- http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/ Exploit
- http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html lists.immunitysec.com
- http://www.adobe.com/support/security/bulletins/apsb10-09.html www.adobe.com
- http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li www.blackhat.com
- http://www.securityfocus.com/bid/39227 www.securityfocus.com
- http://www.securityfocus.com/bid/39329 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA10-103C.html US Government Resource
- http://www.vupen.com/english/advisories/2010/0873 Vendor Advisory
- http://www.youtube.com/watch?v=9EVHtY1-0q8 www.youtube.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57589 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940 oval.cisecurity.org