CVEvulnerability
CVE-2010-1285
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20, CWE-399
Description
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201.
Affected configurations
• adobe acrobat 9.0
• adobe acrobat 9.1
• adobe acrobat 9.1.1
• adobe acrobat 9.1.2
• adobe acrobat 9.1.3
• adobe acrobat 9.2
• adobe acrobat 9.3
• adobe acrobat 9.3.1
• adobe acrobat 9.3.2
• adobe acrobat reader 9.0
• adobe acrobat reader 9.1
• adobe acrobat reader 9.1.1
• adobe acrobat reader 9.1.2
• adobe acrobat reader 9.1.3
• adobe acrobat reader 9.2
• adobe acrobat reader 9.3
• adobe acrobat reader 9.3.1
• adobe acrobat reader 9.3.2
• adobe acrobat 8.0
• adobe acrobat 8.1
• adobe acrobat 8.1.1
• adobe acrobat 8.1.2
• adobe acrobat 8.1.3
• adobe acrobat 8.1.4
• adobe acrobat 8.1.5
• adobe acrobat 8.1.6
• adobe acrobat 8.1.7
• adobe acrobat 8.2
• adobe acrobat 8.2.1
• adobe acrobat 8.2.2
• adobe acrobat reader 8.0
• adobe acrobat reader 8.1
• adobe acrobat reader 8.1.1
• adobe acrobat reader 8.1.2
• adobe acrobat reader 8.1.4
• adobe acrobat reader 8.1.5
• adobe acrobat reader 8.1.6
• adobe acrobat reader 8.1.7
• adobe acrobat reader 8.2.1
• adobe acrobat reader 8.2.2
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.adobe.com/support/security/bulletins/apsb10-15.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/512099 www.securityfocus.com
- http://www.securityfocus.com/bid/41232 www.securityfocus.com
- http://www.securitytracker.com/id?1024159 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/1636 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6725 oval.cisecurity.org
- http://www.adobe.com/support/security/bulletins/apsb10-15.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/512099 www.securityfocus.com
- http://www.securityfocus.com/bid/41232 www.securityfocus.com
- http://www.securitytracker.com/id?1024159 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/1636 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6725 oval.cisecurity.org