CVE-2010-1241
Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x...
Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.
Exploit likelihood
What each source reports
NVD Score used
9.3
Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.
- Record
CVE-2010-1241- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.
- Record
CVE-2010-1241- Updated
- 2026-11-02
EUVDEUVD-2010-1271 No score
Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.
- Record
EUVD-2010-1271- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fcqq-w27v-8hfw No score
Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x...
Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.
- Record
GHSA-fcqq-w27v-8hfw- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
acroreadRed Hat:rhel_extras:4 From an advisory covering 15 CVEs |
before 0:9.3.2-1.el4 | 0:9.3.2-1.el4 |
acroread-pluginRed Hat:rhel_extras:4 From an advisory covering 15 CVEs |
before 0:9.3.2-1.el4 | 0:9.3.2-1.el4 |
acroreadRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 0:9.3.2-1.el5 | 0:9.3.2-1.el5 |
acroread-pluginRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 0:9.3.2-1.el5 | 0:9.3.2-1.el5 |
acroreadRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 0:9.3.2-1.el5 | 0:9.3.2-1.el5 |
acroread-pluginRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 0:9.3.2-1.el5 | 0:9.3.2-1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1241 is a high vulnerability (CVSS 9.3) in Adobe Acrobat Reader, published April 5, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.21%, the 95th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/57589
securityfocus.com/bid/39227
lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html
vupen.com/english/advisories/2010/0873
us-cert.gov/cas/techalerts/TA10-103C.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940
Show 56 moreShow less
securityfocus.com/bid/39329
adobe.com/support/security/bulletins/apsb10-09.html
blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation
youtube.com/watch?v=9EVHtY1-0q8
blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html
nvd.nist.gov/vuln/detail/CVE-2010-1241
github.com/advisories/GHSA-fcqq-w27v-8hfw
access.redhat.com/errata/RHSA-2010:0349
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=579213
bugzilla.redhat.com/show_bug.cgi?id=581417
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0349.json
access.redhat.com/security/cve/CVE-2010-0190
cve.org/CVERecord?id=CVE-2010-0190
nvd.nist.gov/vuln/detail/CVE-2010-0190
access.redhat.com/security/cve/CVE-2010-0191
cve.org/CVERecord?id=CVE-2010-0191
nvd.nist.gov/vuln/detail/CVE-2010-0191
access.redhat.com/security/cve/CVE-2010-0192
cve.org/CVERecord?id=CVE-2010-0192
nvd.nist.gov/vuln/detail/CVE-2010-0192
access.redhat.com/security/cve/CVE-2010-0193
cve.org/CVERecord?id=CVE-2010-0193
nvd.nist.gov/vuln/detail/CVE-2010-0193
access.redhat.com/security/cve/CVE-2010-0194
cve.org/CVERecord?id=CVE-2010-0194
nvd.nist.gov/vuln/detail/CVE-2010-0194
access.redhat.com/security/cve/CVE-2010-0195
cve.org/CVERecord?id=CVE-2010-0195
nvd.nist.gov/vuln/detail/CVE-2010-0195
access.redhat.com/security/cve/CVE-2010-0196
cve.org/CVERecord?id=CVE-2010-0196
nvd.nist.gov/vuln/detail/CVE-2010-0196
access.redhat.com/security/cve/CVE-2010-0197
cve.org/CVERecord?id=CVE-2010-0197
nvd.nist.gov/vuln/detail/CVE-2010-0197
access.redhat.com/security/cve/CVE-2010-0198
cve.org/CVERecord?id=CVE-2010-0198
nvd.nist.gov/vuln/detail/CVE-2010-0198
access.redhat.com/security/cve/CVE-2010-0199
cve.org/CVERecord?id=CVE-2010-0199
nvd.nist.gov/vuln/detail/CVE-2010-0199
access.redhat.com/security/cve/CVE-2010-0201
cve.org/CVERecord?id=CVE-2010-0201
nvd.nist.gov/vuln/detail/CVE-2010-0201
access.redhat.com/security/cve/CVE-2010-0202
cve.org/CVERecord?id=CVE-2010-0202
nvd.nist.gov/vuln/detail/CVE-2010-0202
access.redhat.com/security/cve/CVE-2010-0203
cve.org/CVERecord?id=CVE-2010-0203
nvd.nist.gov/vuln/detail/CVE-2010-0203
access.redhat.com/security/cve/CVE-2010-0204
cve.org/CVERecord?id=CVE-2010-0204
nvd.nist.gov/vuln/detail/CVE-2010-0204
access.redhat.com/security/cve/CVE-2010-1241
cve.org/CVERecord?id=CVE-2010-1241