CVE-2010-3621: Buffer Overflow

Published Oct 6, 2010

Updated

Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3622, CVE-2010-3628, CVE-2010-3632, and CVE-2010-3658.

Affected Software

49 affected components

Adobe Acrobat=8.0

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2.1

Adobe Acrobat=8.1.2

Adobe Acrobat reader=8.1.6

Adobe Acrobat reader=8.2.3

Adobe Acrobat reader=8.2

Adobe Acrobat reader=8.2.2

Adobe Acrobat=8.2.4

Adobe Acrobat=8.1.1

Adobe Acrobat reader=8.2.4

Adobe Acrobat=8.2.3

Adobe Acrobat=8.2

Adobe Acrobat=8.1

Adobe Acrobat reader=8.0

Adobe Acrobat reader=8.1.5

Adobe Acrobat=8.2.2

Adobe Acrobat reader=8.2.1

Adobe Acrobat reader=8.1.7

Adobe Acrobat reader=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.4

Adobe Acrobat reader=8.1.2

Adobe Acrobat reader=8.1.1

Adobe Acrobat reader=8.1

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.3

Adobe Acrobat=9.3.3

Adobe Acrobat=9.2

Adobe Acrobat=9.1

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.3

Adobe Acrobat=9.0

Adobe Acrobat reader=9.1.2

Adobe Acrobat=9.3.4

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.1.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.1.1

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.3.2

Adobe Acrobat=9.3.1

Adobe Acrobat=9.1.2

Adobe Acrobat reader=9.3.1

Adobe Acrobat=9.1.3

Adobe Acrobat=9.3

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-21.html

Event History

Oct 6, 2010

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3621?

CVE-2010-3621 is considered to have a critical severity due to the potential for arbitrary code execution.

How do I fix CVE-2010-3621?

To fix CVE-2010-3621, update Adobe Reader and Acrobat to version 9.4 or later for 9.x and version 8.2.5 or later for 8.x.

What versions of Adobe Reader and Acrobat are affected by CVE-2010-3621?

CVE-2010-3621 affects Adobe Reader and Acrobat versions 9.x prior to 9.4 and 8.x prior to 8.2.5.

Can CVE-2010-3621 cause denial of service?

Yes, CVE-2010-3621 can lead to denial of service through memory corruption.

What types of attacks can CVE-2010-3621 enable?

CVE-2010-3621 can allow attackers to execute arbitrary code and potentially compromise the affected system.