CVE-2010-3626: Input Validation

Published Oct 6, 2010

Updated

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-2889.

Affected Software

49 affected components

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2

Adobe Acrobat=8.2.1

Adobe Acrobat=8.2.2

Adobe Acrobat=8.2.3

Adobe Acrobat=8.2.4

Adobe Acrobat reader=8.0

Adobe Acrobat reader=8.1

Adobe Acrobat reader=8.1.1

Adobe Acrobat reader=8.1.2

Adobe Acrobat reader=8.1.4

Adobe Acrobat reader=8.1.5

Adobe Acrobat reader=8.1.6

Adobe Acrobat reader=8.1.7

Adobe Acrobat reader=8.2

Adobe Acrobat reader=8.2.1

Adobe Acrobat reader=8.2.2

Adobe Acrobat reader=8.2.3

Adobe Acrobat reader=8.2.4

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.1

Adobe Acrobat reader=9.1.2

Adobe Acrobat reader=9.1.3

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.3.1

Adobe Acrobat reader=9.3.2

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.3.4

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-21.html

Event History

Oct 6, 2010

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-3626?

CVE-2010-3626 has a critical severity rating as it allows attackers to execute arbitrary code.

How do I fix CVE-2010-3626?

To fix CVE-2010-3626, update Adobe Reader and Acrobat to version 9.4 or newer for 9.x, and 8.2.5 or newer for 8.x.

Which software versions are affected by CVE-2010-3626?

CVE-2010-3626 affects Adobe Reader and Acrobat versions 8.x before 8.2.5 and 9.x before 9.4.

What type of attack is possible with CVE-2010-3626?

CVE-2010-3626 can be exploited by attackers to execute arbitrary code via a crafted font.

Is there a workaround for CVE-2010-3626?

A recommended workaround for CVE-2010-3626 includes disabling the rendering of fonts in Adobe Reader and Acrobat until the software is updated.