CVE-2010-2201: Critical severity adobe acrobat reader vulnerability

Published Jun 30, 2010

Updated

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content involving the (1) pushstring (0x2C) operator, (2) debugfile (0xF1) operator, and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-1285 and CVE-2010-2168.

Affected Software

42 affected components

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Apple iOS and macOS

Microsoft Windows

Adobe Acrobat Reader=9.0

Adobe Acrobat Reader=9.1

Adobe Acrobat Reader=9.1.1

Adobe Acrobat Reader=9.1.2

Adobe Acrobat Reader=9.1.3

Adobe Acrobat Reader=9.2

Adobe Acrobat Reader=9.3

Adobe Acrobat Reader=9.3.1

Adobe Acrobat Reader=9.3.2

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2

Adobe Acrobat=8.2.1

Adobe Acrobat=8.2.2

Adobe Acrobat Reader=8.0

Adobe Acrobat Reader=8.1

Adobe Acrobat Reader=8.1.1

Adobe Acrobat Reader=8.1.2

Adobe Acrobat Reader=8.1.4

Adobe Acrobat Reader=8.1.5

Adobe Acrobat Reader=8.1.6

Adobe Acrobat Reader=8.1.7

Adobe Acrobat Reader=8.2.1

Adobe Acrobat Reader=8.2.2

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-15.html

Event History

Jun 30, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

06:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2201?

CVE-2010-2201 is classified as critical due to its potential to allow remote code execution through malicious PDF files.

How do I fix CVE-2010-2201?

To fix CVE-2010-2201, update Adobe Reader and Acrobat to version 9.3.3 or later for version 9.x, and to version 8.2.3 or later for version 8.x.

What systems are affected by CVE-2010-2201?

CVE-2010-2201 affects Adobe Reader and Acrobat versions 8.x and 9.x on both Windows and Mac OS X.

What type of vulnerability is CVE-2010-2201?

CVE-2010-2201 is a security vulnerability that exploits crafted Flash content within PDF files leading to arbitrary code execution.

Can I still use affected versions of Adobe Reader and Acrobat safely?

Using affected versions of Adobe Reader and Acrobat is unsafe as they are susceptible to exploitations unless patched.