PT-2010-2990 · Adobe · Acrobat+1

Publicado 2010-06-30 · Atualizado 2018-10-30 · CVE-2010-1285

NVD

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201.

Correção

RCE

Enumeração de Fraquezas

CWE-399

CWE-20

Identificadores relacionados

CVE-2010-1285

RHSA-2010:0503

Produtos afetados

Acrobat

Acrobat Reader

Referências · 7

• http://securityfocus.com/bid/41232 · Nota
• http://securityfocus.com/archive/1/512099 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-1285 · Nota de Segurança
• http://vupen.com/english/advisories/2010/1636 · Nota
• http://adobe.com/support/security/bulletins/apsb10-15.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6725 · Nota
• http://securitytracker.com/id?1024159 · Nota