CVE-2010-2205: Code Injection

Published Jun 30, 2010

Updated

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, access uninitialized memory, which allows attackers to execute arbitrary code via unspecified vectors.

Affected Software

42 affected components

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Apple iOS and macOS

Microsoft Windows

Adobe Acrobat Reader=9.0

Adobe Acrobat Reader=9.1

Adobe Acrobat Reader=9.1.1

Adobe Acrobat Reader=9.1.2

Adobe Acrobat Reader=9.1.3

Adobe Acrobat Reader=9.2

Adobe Acrobat Reader=9.3

Adobe Acrobat Reader=9.3.1

Adobe Acrobat Reader=9.3.2

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2

Adobe Acrobat=8.2.1

Adobe Acrobat=8.2.2

Adobe Acrobat Reader=8.0

Adobe Acrobat Reader=8.1

Adobe Acrobat Reader=8.1.1

Adobe Acrobat Reader=8.1.2

Adobe Acrobat Reader=8.1.4

Adobe Acrobat Reader=8.1.5

Adobe Acrobat Reader=8.1.6

Adobe Acrobat Reader=8.1.7

Adobe Acrobat Reader=8.2.1

Adobe Acrobat Reader=8.2.2

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-15.html

Event History

Jun 30, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

06:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2205?

CVE-2010-2205 is a critical vulnerability that allows attackers to execute arbitrary code due to uninitialized memory access.

How do I fix CVE-2010-2205?

To fix CVE-2010-2205, update Adobe Reader and Acrobat to version 9.3.3 or later for version 9.x and to version 8.2.3 or later for version 8.x.

What software is affected by CVE-2010-2205?

CVE-2010-2205 affects Adobe Reader and Acrobat versions 9.x before 9.3.3 and 8.x before 8.2.3 on Windows and Mac OS X.

Can CVE-2010-2205 be exploited without user interaction?

Yes, CVE-2010-2205 can potentially be exploited through crafted PDF files which could be opened directly by the user.

What are the potential consequences of CVE-2010-2205 exploitation?

Exploitation of CVE-2010-2205 may lead to a full system compromise, allowing attackers to execute arbitrary code with the privileges of the user.