CVE-2010-2201

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted…

published June 30, 2010

CVSS
—
EPSS
14%
Percentile
96.6
In the wild
Unconfirmed
What it is

⚠️ A crafty PDF could be your worst enemy! This vulnerability in Adobe Reader and Acrobat lets attackers execute arbitrary code, all thanks to some sneaky Flash content. 📄💥 Think of it like a restaurant menu that looks delicious but has a hidden ingredient that makes you sick — if the kitchen doesn't double-check the recipes, customers could end up with a nasty surprise. 🍽️ If exploited, this vulnerability allows attackers to run any code they want on your system just by opening a seemingly innocent PDF. Imagine the chaos: they could install malware, steal data, or even take full control of your device!

Put simply

Think of it like a restaurant menu that looks delicious but has a hidden ingredient that makes you sick — if the kitchen doesn't double-check the recipes, customers could end up with a nasty surprise. 🍽️ This vulnerability stems from an invalid pointer issue triggered by crafted Flash content that utilizes specific operators in a PDF file. It leads to memory corruption, enabling remote code execution without any other interaction required.

What to do

If exploited, this vulnerability allows attackers to run any code they want on your system just by opening a seemingly innocent PDF. Imagine the chaos: they could install malware, steal data, or even take full control of your device! To protect yourself, update Adobe Reader and Acrobat to version 9.3.3 or higher for 9.x and version 8.2.3 for 8.x. Disable Flash content in PDFs if possible, and always be cautious of untrusted files! 🛡️ You've got this! With these updates, you'll be keeping those sneaky attackers at bay! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14267 · 96.6th percentile
Published
2010-06-30T18:00Z
EPSS history
Timeline
  • 30 JUN 18:00Z
    Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted…
    cvelistv5