CVE-2010-1285

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified…

published June 30, 2010

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

⚠️ A crafty misuse of memory pointers is at play here, inviting unwelcome guests into your Adobe Reader and Acrobat! Think of this vulnerability like a restaurant that lets anyone sneak into the kitchen because the door lock is broken. Once inside, an attacker could whip up a dish that could spoil your entire meal — that’s the risk here with arbitrary code execution! An attacker could take control of your system, executing malicious code through Adobe Reader or Acrobat. This could lead to severe consequences, including data theft or corrupting your files — a security nightmare for anyone!

Put simply

Think of this vulnerability like a restaurant that lets anyone sneak into the kitchen because the door lock is broken. Once inside, an attacker could whip up a dish that could spoil your entire meal — that’s the risk here with arbitrary code execution! This vulnerability arises from improper handling of the newclass (0x58) operator in Adobe Reader and Acrobat, which can result in memory corruption due to invalid pointer manipulation. This flaw allows attackers to execute arbitrary code when exploiting it.

What to do

An attacker could take control of your system, executing malicious code through Adobe Reader or Acrobat. This could lead to severe consequences, including data theft or corrupting your files — a security nightmare for anyone! Update Adobe Reader and Acrobat to versions 9.3.3 or later, and 8.2.3 or later. Regularly check for updates and enable automatic updates to stay protected against such vulnerabilities. You've got this! Stay vigilant and keep your software updated for a safer experience! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04172 · 90.9th percentile
Published
2010-06-30T18:00Z
EPSS history
Timeline
  • 30 JUN 18:00Z
    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified…
    cvelistv5