CVE-2010-1240: Critical severity Adobe Acrobat reader vulnerability
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1240?
CVE-2010-1240 has a significant severity rating as it allows remote attackers to execute arbitrary local programs.
What versions of Adobe software are affected by CVE-2010-1240?
CVE-2010-1240 affects Adobe Reader and Acrobat 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X.
How do I fix CVE-2010-1240?
To fix CVE-2010-1240, update Adobe Reader or Acrobat to the latest version, at least 9.3.3 or 8.2.3 respectively.
What type of attack is facilitated by CVE-2010-1240?
CVE-2010-1240 facilitates social engineering attacks where users may be tricked into executing malicious local programs.
Are Windows and Mac operating systems vulnerable to CVE-2010-1240?
Yes, both Windows and Mac OS X systems are vulnerable to CVE-2010-1240 when using the affected versions of Adobe software.