CVE-2010-2208: Code Injection

Published Jun 30, 2010

Updated

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, dereference a heap object after this object's deletion, which allows attackers to execute arbitrary code via unspecified vectors.

Affected Software

42 affected components

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Apple iOS and macOS

Microsoft Windows

Adobe Acrobat Reader=9.0

Adobe Acrobat Reader=9.1

Adobe Acrobat Reader=9.1.1

Adobe Acrobat Reader=9.1.2

Adobe Acrobat Reader=9.1.3

Adobe Acrobat Reader=9.2

Adobe Acrobat Reader=9.3

Adobe Acrobat Reader=9.3.1

Adobe Acrobat Reader=9.3.2

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2

Adobe Acrobat=8.2.1

Adobe Acrobat=8.2.2

Adobe Acrobat Reader=8.0

Adobe Acrobat Reader=8.1

Adobe Acrobat Reader=8.1.1

Adobe Acrobat Reader=8.1.2

Adobe Acrobat Reader=8.1.4

Adobe Acrobat Reader=8.1.5

Adobe Acrobat Reader=8.1.6

Adobe Acrobat Reader=8.1.7

Adobe Acrobat Reader=8.2.1

Adobe Acrobat Reader=8.2.2

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-15.html

Event History

Jun 30, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

06:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2208?

CVE-2010-2208 has a high severity rating due to its potential to allow attackers to execute arbitrary code.

How do I fix CVE-2010-2208?

To fix CVE-2010-2208, update Adobe Reader and Acrobat to version 9.3.3 or later for 9.x, and to version 8.2.3 or later for 8.x.

What versions of Adobe are affected by CVE-2010-2208?

CVE-2010-2208 affects Adobe Reader and Acrobat versions 8.x prior to 8.2.3 and 9.x prior to 9.3.3.

What systems are vulnerable to CVE-2010-2208?

CVE-2010-2208 affects users running vulnerable versions of Adobe Reader and Acrobat on Windows and Mac OS X.

What kind of attack can exploit CVE-2010-2208?

CVE-2010-2208 can be exploited through unspecified vectors that dereference a heap object after its deletion.