PT-2010-1187 · Adobe · Reader+1

Didier Stevens · Published 2010-04-05 · Updated 2017-09-19 · CVE-2010-1240

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 9.x prior to 9.3.3 Adobe Reader and Acrobat versions 8.x prior to 8.2.3

Description The issue allows remote attackers to trick users into executing an arbitrary local program specified in a PDF document. This is due to the lack of restriction on the contents of a text field in the Launch File warning dialog, making it easier for attackers to deceive users. The vulnerability can be exploited by a specially crafted PDF file, potentially allowing a remote attacker to execute arbitrary code.

Recommendations For Adobe Reader and Acrobat versions 9.x prior to 9.3.3, update to version 9.3.3 or later. For Adobe Reader and Acrobat versions 8.x prior to 8.2.3, update to version 8.2.3 or later.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-264

CWE-78

Related Identifiers

BDU:2023-01768

CVE-2010-1240

RHSA-2010:0503

Affected Products

Acrobat

Reader

References · 23

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_pdf_embedded_exe_nojs.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_pdf_embedded_exe.rb · Exploit
• 🔥 https://github.com/Jasmoon99/Embedded-PDF · Exploit
• 🔥 https://github.com/omarothmann/Embedded-Backdoor-Connection · Exploit
• 🔥 https://exploit-db.com/exploits/11987 · Exploit
• 🔥 https://exploit-db.com/exploits/16671 · Exploit
• 🔥 http://blog.didierstevens.com/2010/03/29/escape-from-pdf · Exploit
• 🔥 https://exploit-db.com/exploits/16682 · Exploit
• https://bdu.fstec.ru/vul/2023-01768 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-1240 · Security Note
• http://vupen.com/english/advisories/2010/1636 · Note
• https://blog.didierstevens.com/2010/06/29/quickpost-no-escape-from-pdf · Note
• http://us-cert.gov/cas/techalerts/TA10-231A.html · Note
• https://cybersecurity-help.cz/vdb/SB2010080701 · Note
• http://lists.immunitysec.com/pipermail/dailydave/2010-April/006075.html · Note