CVE-2010-2888: Input Validation
Published Oct 6, 2010
·Updated
Multiple unspecified vulnerabilities in an ActiveX control in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Windows allow attackers to execute arbitrary code via unknown vectors.
Affected Software
49 affected components
Adobe Acrobat=8.0
Adobe Acrobat=8.1.7
Adobe Acrobat=8.2.1
Adobe Acrobat=8.1.2
Adobe Acrobat reader=8.1.6
Adobe Acrobat reader=8.2.3
Adobe Acrobat reader=8.2
Adobe Acrobat reader=8.2.2
Adobe Acrobat=8.2.4
Adobe Acrobat=8.1.1
Adobe Acrobat reader=8.2.4
Adobe Acrobat=8.2.3
Adobe Acrobat=8.2
Adobe Acrobat=8.1
Adobe Acrobat reader=8.0
Adobe Acrobat reader=8.1.5
Adobe Acrobat=8.2.2
Adobe Acrobat reader=8.2.1
Adobe Acrobat reader=8.1.7
Adobe Acrobat reader=8.1.4
Adobe Acrobat=8.1.5
Adobe Acrobat=8.1.4
Adobe Acrobat reader=8.1.2
Adobe Acrobat reader=8.1.1
Adobe Acrobat reader=8.1
Adobe Acrobat=8.1.6
Adobe Acrobat=8.1.3
Adobe Acrobat=9.3.3
Adobe Acrobat=9.2
Adobe Acrobat=9.1
Adobe Acrobat reader=9.2
Adobe Acrobat reader=9.1
Adobe Acrobat reader=9.1.3
Adobe Acrobat=9.0
Adobe Acrobat reader=9.1.2
Adobe Acrobat=9.3.4
Adobe Acrobat reader=9.3.3
Adobe Acrobat reader=9.1.1
Adobe Acrobat=9.3.2
Adobe Acrobat=9.1.1
Adobe Acrobat reader=9.3.4
Adobe Acrobat reader=9.3
Adobe Acrobat reader=9.0
Adobe Acrobat reader=9.3.2
Adobe Acrobat=9.3.1
Adobe Acrobat=9.1.2
Adobe Acrobat reader=9.3.1
Adobe Acrobat=9.1.3
Adobe Acrobat=9.3
Remediation
Event History
Oct 6, 2010
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2888?
CVE-2010-2888 is considered a critical vulnerability that allows remote code execution.
2
How do I fix CVE-2010-2888?
To fix CVE-2010-2888, upgrade Adobe Reader and Acrobat to version 9.4 or higher, or 8.2.5 or higher.
3
What software versions are affected by CVE-2010-2888?
CVE-2010-2888 affects Adobe Reader and Acrobat versions 8.x before 8.2.5 and 9.x before 9.4 on Windows.
4
Can CVE-2010-2888 be exploited remotely?
Yes, CVE-2010-2888 can be exploited remotely, potentially allowing attackers to execute arbitrary code.
5
What should I do if I cannot update my software to mitigate CVE-2010-2888?
If updating is not possible, consider disabling ActiveX controls in Adobe Reader and Acrobat as a temporary measure.