CVE-2010-1240
NoneCVSS
—
EPSS
73.6%
Published
Apr 5, 2010
CISA due date
—
The record
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:4 | acroread | 0 | 0:9.3.3-2.el4 |
| Red Hat:rhel_extras:4 | acroread-plugin | 0 | 0:9.3.3-2.el4 |
| Red Hat:rhel_extras:5::client | acroread | 0 | 0:9.3.3-1.el5 |
| Red Hat:rhel_extras:5::client | acroread-plugin | 0 | 0:9.3.3-1.el5 |
| Red Hat:rhel_extras:5::server | acroread | 0 | 0:9.3.3-1.el5 |
| Red Hat:rhel_extras:5::server | acroread-plugin | 0 | 0:9.3.3-1.el5 |
Related vulnerabilities
- CVE-2011-2462 Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and… Also affects acroread
- CVE-2011-2140 Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before… Also affects acroread
- CVE-2011-2415 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
- CVE-2011-2414 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
- CVE-2011-2130 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
- CVE-2011-2137 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
- CVE-2011-2134 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
- CVE-2011-2095 Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x… Also affects acroread