CVEvulnerability

CVE-2010-1285

9.3 HIGH Published 2010-06-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-06-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20, CWE-399

Description

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201.

Affected configurations

• adobe acrobat 9.0 • adobe acrobat 9.1 • adobe acrobat 9.1.1 • adobe acrobat 9.1.2 • adobe acrobat 9.1.3 • adobe acrobat 9.2 • adobe acrobat 9.3 • adobe acrobat 9.3.1 • adobe acrobat 9.3.2 • adobe acrobat reader 9.0 • adobe acrobat reader 9.1 • adobe acrobat reader 9.1.1 • adobe acrobat reader 9.1.2 • adobe acrobat reader 9.1.3 • adobe acrobat reader 9.2 • adobe acrobat reader 9.3 • adobe acrobat reader 9.3.1 • adobe acrobat reader 9.3.2 • adobe acrobat 8.0 • adobe acrobat 8.1 • adobe acrobat 8.1.1 • adobe acrobat 8.1.2 • adobe acrobat 8.1.3 • adobe acrobat 8.1.4 • adobe acrobat 8.1.5 • adobe acrobat 8.1.6 • adobe acrobat 8.1.7 • adobe acrobat 8.2 • adobe acrobat 8.2.1 • adobe acrobat 8.2.2 • adobe acrobat reader 8.0 • adobe acrobat reader 8.1 • adobe acrobat reader 8.1.1 • adobe acrobat reader 8.1.2 • adobe acrobat reader 8.1.4 • adobe acrobat reader 8.1.5 • adobe acrobat reader 8.1.6 • adobe acrobat reader 8.1.7 • adobe acrobat reader 8.2.1 • adobe acrobat reader 8.2.2

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References