CVE-2010-2201

high · 9.3

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content involving the (1) pushstring (0x2C) operator, (2) debugfile (0xF1) operator, and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-1285 and CVE-2010-2168.

9.3

CVSS

14.3%

EPSS (exploit prob.)

96th

EPSS percentile

2010-06-30

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-399

Affected products

Vendor	Product	Affected versions
adobe	acrobat	9.0
adobe	acrobat	9.1
adobe	acrobat	9.1.1
adobe	acrobat	9.1.2
adobe	acrobat	9.1.3
adobe	acrobat	9.2
adobe	acrobat	9.3
adobe	acrobat	9.3.1
adobe	acrobat	9.3.2
apple	mac_os_x	all versions
microsoft	windows	all versions
adobe	acrobat_reader	9.0
adobe	acrobat_reader	9.1
adobe	acrobat_reader	9.1.1
adobe	acrobat_reader	9.1.2
adobe	acrobat_reader	9.1.3
adobe	acrobat_reader	9.2
adobe	acrobat_reader	9.3
adobe	acrobat_reader	9.3.1
adobe	acrobat_reader	9.3.2
apple	mac_os_x	all versions
microsoft	windows	all versions
adobe	acrobat	8.0
adobe	acrobat	8.1
adobe	acrobat	8.1.1
adobe	acrobat	8.1.2
adobe	acrobat	8.1.3
adobe	acrobat	8.1.4
adobe	acrobat	8.1.5
adobe	acrobat	8.1.6
adobe	acrobat	8.1.7
adobe	acrobat	8.2
adobe	acrobat	8.2.1
adobe	acrobat	8.2.2
apple	mac_os_x	all versions
microsoft	windows	all versions
adobe	acrobat_reader	8.0
adobe	acrobat_reader	8.1
adobe	acrobat_reader	8.1.1
adobe	acrobat_reader	8.1.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-2201