CVE-2010-2201 in Acrobat Reader

Riassunto

di MITRE

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content involving the (1) pushstring (0x2C) operator, (2) debugfile (0xF1) operator, and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-1285 and CVE-2010-2168.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 08/06/2010
• Divulgazione: 30/06/2010
• Moderazione: accettato
• Voce: VDB-53878
• CPE: pronto
• CWE: CWE-399 (confermato)
• Sfruttamento: Scaricare
• CVSS: 9.3 (NVD)
• EPSS: 0.14267
• KEV: no
• Attività: molto basso
• Settore: Homeoffice, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-2201
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-2201
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-2201/