CVE-2010-3625: Code Injection

Published Oct 6, 2010

Updated

Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a "prefix protocol handler vulnerability."

Affected Software

49 affected components

Adobe Acrobat=8.0

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2.1

Adobe Acrobat=8.1.2

Adobe Acrobat reader=8.1.6

Adobe Acrobat reader=8.2.3

Adobe Acrobat reader=8.2

Adobe Acrobat reader=8.2.2

Adobe Acrobat=8.2.4

Adobe Acrobat=8.1.1

Adobe Acrobat reader=8.2.4

Adobe Acrobat=8.2.3

Adobe Acrobat=8.2

Adobe Acrobat=8.1

Adobe Acrobat reader=8.0

Adobe Acrobat reader=8.1.5

Adobe Acrobat=8.2.2

Adobe Acrobat reader=8.2.1

Adobe Acrobat reader=8.1.7

Adobe Acrobat reader=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.4

Adobe Acrobat reader=8.1.2

Adobe Acrobat reader=8.1.1

Adobe Acrobat reader=8.1

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.3

Adobe Acrobat=9.3.3

Adobe Acrobat=9.2

Adobe Acrobat=9.1

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.3

Adobe Acrobat=9.0

Adobe Acrobat reader=9.1.2

Adobe Acrobat=9.3.4

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.1.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.1.1

Adobe Acrobat reader=9.3.4

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.3.2

Adobe Acrobat=9.3.1

Adobe Acrobat=9.1.2

Adobe Acrobat reader=9.3.1

Adobe Acrobat=9.1.3

Adobe Acrobat=9.3

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-21.html

Event History

Oct 6, 2010

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3625?

CVE-2010-3625 has been classified as a critical vulnerability that allows attackers to execute arbitrary code.

How do I fix CVE-2010-3625?

To resolve CVE-2010-3625, update Adobe Reader and Acrobat to version 9.4 or later for version 9.x and to version 8.2.5 or later for version 8.x.

Which software versions are affected by CVE-2010-3625?

CVE-2010-3625 affects Adobe Reader and Acrobat versions 8.x before 8.2.5 and 9.x before 9.4 on both Windows and Mac OS X.

What type of attack does CVE-2010-3625 facilitate?

CVE-2010-3625 can facilitate attacks that result in executing arbitrary code on a vulnerable system, potentially leading to a system compromise.

Is there any workaround for CVE-2010-3625?

While the best mitigation for CVE-2010-3625 is to apply the latest updates, users can mitigate risk by avoiding opening unknown PDF documents until updated.