CVE-2010-2168

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted…

published June 30, 2010

CVSS
—
EPSS
14%
Percentile
96.6
In the wild
Unconfirmed
What it is

⚠️ A crafted PDF could turn your Adobe Reader into an exploitable playground! This vulnerability has been lurking in versions 9.x and 8.x — a sneaky way for attackers to run arbitrary code. 🔥 Think of it like a magician performing a trick at a party. If someone hands them a blank piece of paper instead of a card, they could easily manipulate the audience's perception, leading to chaos without anyone being the wiser! If exploited, an attacker could execute harmful code on your system, potentially leading to data theft or control over your machine. Imagine having an uninvited guest take over your computer – it could be absolutely devastating!

Put simply

Think of it like a magician performing a trick at a party. If someone hands them a blank piece of paper instead of a card, they could easily manipulate the audience's perception, leading to chaos without anyone being the wiser! This flaw allows attackers to exploit the newfunction (0x44) operator within Flash content in PDF files, causing memory corruption in Adobe Reader and Acrobat, which can result in arbitrary code execution.

What to do

If exploited, an attacker could execute harmful code on your system, potentially leading to data theft or control over your machine. Imagine having an uninvited guest take over your computer – it could be absolutely devastating! To safeguard against this vulnerability, upgrade to Adobe Reader version 9.3.3 or 8.2.3 and ensure that all Flash content is handled safely. Regularly update your software to protect against emerging threats! You've got this! By updating your software, you take a crucial step in fortifying your defenses. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14267 · 96.6th percentile
Published
2010-06-30T18:00Z
EPSS history
Timeline
  • 30 JUN 18:00Z
    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted…
    cvelistv5