CVE-2010-2204: Critical severity adobe acrobat reader vulnerability

Published Jun 30, 2010

Updated

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

Affected Software

42 affected components

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Apple iOS and macOS

Microsoft Windows

Adobe Acrobat Reader=9.0

Adobe Acrobat Reader=9.1

Adobe Acrobat Reader=9.1.1

Adobe Acrobat Reader=9.1.2

Adobe Acrobat Reader=9.1.3

Adobe Acrobat Reader=9.2

Adobe Acrobat Reader=9.3

Adobe Acrobat Reader=9.3.1

Adobe Acrobat Reader=9.3.2

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2

Adobe Acrobat=8.2.1

Adobe Acrobat=8.2.2

Adobe Acrobat Reader=8.0

Adobe Acrobat Reader=8.1

Adobe Acrobat Reader=8.1.1

Adobe Acrobat Reader=8.1.2

Adobe Acrobat Reader=8.1.4

Adobe Acrobat Reader=8.1.5

Adobe Acrobat Reader=8.1.6

Adobe Acrobat Reader=8.1.7

Adobe Acrobat Reader=8.2.1

Adobe Acrobat Reader=8.2.2

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-15.html

Event History

Jun 30, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

06:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2204?

CVE-2010-2204 has a severity rating that has been designated as critical due to its potential to allow attackers to execute arbitrary code.

How do I fix CVE-2010-2204?

To fix CVE-2010-2204, update to Adobe Reader and Acrobat versions 9.3.3 or 8.2.3 or later.

What are the affected versions for CVE-2010-2204?

CVE-2010-2204 affects Adobe Reader and Acrobat versions 9.x before 9.3.3 and 8.x before 8.2.3.

Can CVE-2010-2204 cause data loss?

CVE-2010-2204 may lead to a denial of service, which can indirectly cause data loss if unsaved work is lost.

Is there any known exploitation of CVE-2010-2204?

While specific exploitation details are not always public, CVE-2010-2204 has been acknowledged to allow potential attackers to execute arbitrary code.