CVE-2010-2890: Buffer Overflow

Published Oct 6, 2010

Updated

Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-3619, CVE-2010-3621, CVE-2010-3622, CVE-2010-3628, CVE-2010-3632, and CVE-2010-3658.

Affected Software

49 affected components

Adobe Acrobat=8.0

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2.1

Adobe Acrobat=8.1.2

Adobe Acrobat reader=8.1.6

Adobe Acrobat reader=8.2.3

Adobe Acrobat reader=8.2

Adobe Acrobat reader=8.2.2

Adobe Acrobat=8.2.4

Adobe Acrobat=8.1.1

Adobe Acrobat reader=8.2.4

Adobe Acrobat=8.2.3

Adobe Acrobat=8.2

Adobe Acrobat=8.1

Adobe Acrobat reader=8.0

Adobe Acrobat reader=8.1.5

Adobe Acrobat=8.2.2

Adobe Acrobat reader=8.2.1

Adobe Acrobat reader=8.1.7

Adobe Acrobat reader=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.4

Adobe Acrobat reader=8.1.2

Adobe Acrobat reader=8.1.1

Adobe Acrobat reader=8.1

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.3

Adobe Acrobat=9.3.3

Adobe Acrobat=9.2

Adobe Acrobat=9.1

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.3

Adobe Acrobat=9.0

Adobe Acrobat reader=9.1.2

Adobe Acrobat=9.3.4

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.1.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.1.1

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.3.2

Adobe Acrobat=9.3.1

Adobe Acrobat=9.1.2

Adobe Acrobat reader=9.3.1

Adobe Acrobat=9.1.3

Adobe Acrobat=9.3

Event History

Oct 6, 2010

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2890?

CVE-2010-2890 has been classified as critical due to its potential for arbitrary code execution.

Who is affected by CVE-2010-2890?

CVE-2010-2890 affects Adobe Reader and Acrobat versions 8.x before 8.2.5 and 9.x before 9.4 on Windows and Mac OS X.

How do I fix CVE-2010-2890?

To mitigate CVE-2010-2890, users should update their Adobe Reader or Acrobat to the latest version available.

What type of attacks can CVE-2010-2890 facilitate?

CVE-2010-2890 can allow attackers to execute arbitrary code or cause a denial of service through memory corruption.

When was CVE-2010-2890 identified?

CVE-2010-2890 was disclosed in 2010 and is part of the Adobe security bulletin APSB10-21.