CVE-2010-3622: Buffer Overflow

Published Oct 6, 2010

Updated

Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2890, CVE-2010-3619, CVE-2010-3621, CVE-2010-3628, CVE-2010-3632, and CVE-2010-3658.

Affected Software

49 affected components

Adobe Acrobat=8.0

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2.1

Adobe Acrobat=8.1.2

Adobe Acrobat reader=8.1.6

Adobe Acrobat reader=8.2.3

Adobe Acrobat reader=8.2

Adobe Acrobat reader=8.2.2

Adobe Acrobat=8.2.4

Adobe Acrobat=8.1.1

Adobe Acrobat reader=8.2.4

Adobe Acrobat=8.2.3

Adobe Acrobat=8.2

Adobe Acrobat=8.1

Adobe Acrobat reader=8.0

Adobe Acrobat reader=8.1.5

Adobe Acrobat=8.2.2

Adobe Acrobat reader=8.2.1

Adobe Acrobat reader=8.1.7

Adobe Acrobat reader=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.4

Adobe Acrobat reader=8.1.2

Adobe Acrobat reader=8.1.1

Adobe Acrobat reader=8.1

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.3

Adobe Acrobat=9.3.3

Adobe Acrobat=9.2

Adobe Acrobat=9.1

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.3

Adobe Acrobat=9.0

Adobe Acrobat reader=9.1.2

Adobe Acrobat=9.3.4

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.1.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.1.1

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.3.2

Adobe Acrobat=9.3.1

Adobe Acrobat=9.1.2

Adobe Acrobat reader=9.3.1

Adobe Acrobat=9.1.3

Adobe Acrobat=9.3

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-21.html

Event History

Oct 6, 2010

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3622?

CVE-2010-3622 is classified as a critical vulnerability allowing arbitrary code execution or denial of service.

How do I fix CVE-2010-3622?

To fix CVE-2010-3622, update Adobe Reader and Acrobat to version 9.4 or later for 9.x, and version 8.2.5 or later for 8.x.

Which versions are affected by CVE-2010-3622?

CVE-2010-3622 affects Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Windows and Mac OS X.

What impact does CVE-2010-3622 have on users?

CVE-2010-3622 can lead to memory corruption, potentially allowing attackers to execute code and compromise a user's system.

Is there a workaround for CVE-2010-3622 if I cannot update?

While the best course is to update to a secure version, avoiding opening untrusted PDF files can help mitigate the risks associated with CVE-2010-3622.