CVE-2010-1278: Buffer Overflow

Published Apr 22, 2010

Updated

Buffer overflow in the Atlcom.getatlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters.

Affected Software

28 affected components

Adobe Reader=8.1.1

Adobe Reader=9.1.1

Adobe Reader=8.1.5

Adobe Reader=9.1.3

Adobe Reader=9.1

Adobe Reader=9.0

Adobe Reader=8.1.6

Adobe Reader=8.0.0

Adobe Reader=9.1.2

Adobe Reader=8.1.7

Adobe Reader=8.1.4

Adobe Reader=9.2

Adobe Reader=8.1.2

Adobe Acrobat=8.0

Adobe Acrobat=8.1.7

Adobe Acrobat=8.1.2

Adobe Acrobat=9.2

Adobe Acrobat=9.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1

Adobe Acrobat=9.0

Adobe Acrobat=9.1.1

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.4

Adobe Acrobat=9.1.2

Adobe Acrobat=8.1.6

Adobe Acrobat=9.1.3

Adobe Acrobat=8.1.3

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-02.html

Event History

Apr 22, 2010

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:30 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-1278?

The severity of CVE-2010-1278 is considered critical due to its potential to allow remote attackers to execute arbitrary code.

How do I fix CVE-2010-1278?

To fix CVE-2010-1278, update Adobe Reader or Acrobat to version 8.2 or higher for 8.x versions, and 9.3 or higher for 9.x versions.

Which versions of Adobe software are affected by CVE-2010-1278?

CVE-2010-1278 affects Adobe Reader and Acrobat versions 8.x before 8.2 and 9.x before 9.3.

What type of vulnerability is CVE-2010-1278?

CVE-2010-1278 is a buffer overflow vulnerability that can be exploited by remote attackers.

Can CVE-2010-1278 be exploited remotely?

Yes, CVE-2010-1278 can be exploited remotely, allowing attackers to execute arbitrary code.