ID CVE-2010-1285
Summary Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201.
References
Vulnerable Configurations
  • cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:8.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat:8.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:8.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:acrobat_reader:8.2.2:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 30-10-2018 - 16:25)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
oval via4
accepted 2013-08-12T04:09:39.167-04:00
class vulnerability
contributors
  • name J. Daniel Brown
    organization DTCC
  • name SecPod Team
    organization SecPod Technologies
  • name SecPod Team
    organization SecPod Technologies
  • name Shane Shaffer
    organization G2, Inc.
  • name Sergey Artykhov
    organization ALTX-SOFT
  • name Sergey Artykhov
    organization ALTX-SOFT
  • name Shane Shaffer
    organization G2, Inc.
  • name Maria Kedovskaya
    organization ALTX-SOFT
  • name Maria Kedovskaya
    organization ALTX-SOFT
  • name Maria Kedovskaya
    organization ALTX-SOFT
  • name Maria Kedovskaya
    organization ALTX-SOFT
definition_extensions
  • comment Adobe Reader 8 Series is installed
    oval oval:org.mitre.oval:def:6390
  • comment Adobe Reader 9 Series is installed
    oval oval:org.mitre.oval:def:6523
  • comment Adobe Acrobat 8 Series is installed
    oval oval:org.mitre.oval:def:6452
  • comment Adobe Acrobat 9 Series is installed
    oval oval:org.mitre.oval:def:6013
description Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newclass (0x58) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-2168 and CVE-2010-2201.
family windows
id oval:org.mitre.oval:def:6725
status accepted
submitted 2010-06-29T17:30:00.000-05:00
title Adobe Reader and Acrobat Invalid Pointer Vulnerability
version 22
refmap via4
bid 41232
bugtraq 20100630 VUPEN Security Research - Adobe Acrobat and Reader "newclass" Memory Corruption Vulnerability (CVE-2010-1285)
confirm http://www.adobe.com/support/security/bulletins/apsb10-15.html
sectrack 1024159
vupen ADV-2010-1636
Last major update 30-10-2018 - 16:25
Published 30-06-2010 - 18:30
Back to Top