CVE-2010-1285: Input Validation

Published Jun 30, 2010

Updated

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201.

Affected Software

42 affected components

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Apple iOS and macOS

Microsoft Windows

Adobe Acrobat Reader=9.0

Adobe Acrobat Reader=9.1

Adobe Acrobat Reader=9.1.1

Adobe Acrobat Reader=9.1.2

Adobe Acrobat Reader=9.1.3

Adobe Acrobat Reader=9.2

Adobe Acrobat Reader=9.3

Adobe Acrobat Reader=9.3.1

Adobe Acrobat Reader=9.3.2

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2

Adobe Acrobat=8.2.1

Adobe Acrobat=8.2.2

Adobe Acrobat Reader=8.0

Adobe Acrobat Reader=8.1

Adobe Acrobat Reader=8.1.1

Adobe Acrobat Reader=8.1.2

Adobe Acrobat Reader=8.1.4

Adobe Acrobat Reader=8.1.5

Adobe Acrobat Reader=8.1.6

Adobe Acrobat Reader=8.1.7

Adobe Acrobat Reader=8.2.1

Adobe Acrobat Reader=8.2.2

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-15.html

Event History

Jun 30, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

06:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-1285?

CVE-2010-1285 is rated as critical due to its potential to allow remote code execution.

How do I fix CVE-2010-1285?

To fix CVE-2010-1285, update Adobe Reader and Acrobat to versions 9.3.3, 8.2.3 or later.

Which versions of Adobe Reader are affected by CVE-2010-1285?

Adobe Reader versions 9.x before 9.3.3 and 8.x before 8.2.3 are affected by CVE-2010-1285.

Can CVE-2010-1285 be exploited on macOS?

Yes, CVE-2010-1285 can be exploited on macOS systems running the affected versions of Adobe Reader.

What is the impact of CVE-2010-1285?

The impact of CVE-2010-1285 is that attackers can execute arbitrary code on the victim's system through a crafted PDF document.