CVE-2010-1240
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not...
CVE-2010-1240 is a high vulnerability (CVSS 9.3) in Adobe Acrobat Reader, published April 5, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 73.6%, the 99th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 73.6%EPSS, 99th percentile
- Exploitation
- None known10 public exploits
- Fixed in
- No fix listedNo source names one
Description
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
acroreadRed Hat:rhel_extras:4 From an advisory covering 17 CVEs | before 0:9.3.3-2.el4 | 0:9.3.3-2.el4 |
acroread-pluginRed Hat:rhel_extras:4 From an advisory covering 17 CVEs | before 0:9.3.3-2.el4 | 0:9.3.3-2.el4 |
acroreadRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs | before 0:9.3.3-1.el5 | 0:9.3.3-1.el5 |
acroread-pluginRed Hat:rhel_extras:5::client From an advisory covering 17 CVEs | before 0:9.3.3-1.el5 | 0:9.3.3-1.el5 |
acroreadRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs | before 0:9.3.3-1.el5 | 0:9.3.3-1.el5 |
acroread-pluginRed Hat:rhel_extras:5::server From an advisory covering 17 CVEs | before 0:9.3.3-1.el5 | 0:9.3.3-1.el5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Adobe PDF Embedded EXE Social Engineering | 2010-03-29 |
| Metasploit | Adobe PDF Escape EXE Social Engineering (No JavaScript) | 2010-03-29 |
| Exploit-DB | Adobe Reader - Escape From '.PDF' Execute Embedded Executable | 2010-03-31 |
| Exploit-DB | Adobe PDF - Embedded EXE Social Engineering (Metasploit) | 2010-12-16 |
| Exploit-DB | Adobe PDF - Escape EXE Social Engineering (No JavaScript) (Metasploit) | 2010-12-16 |
| PoC in GitHub | Jasmoon99/Embedded-PDF | 2021-06-05 |
| PoC in GitHub | omarothmann/Embedded-Backdoor-Connection | 2022-01-26 |
| PoC in GitHub | asepsaepdin/CVE-2010-1240 | 2023-08-02 |
| PoC in GitHub | 12345qwert123456/CVE-2010-1240 | 2025-09-17 |
| PoC in GitHub | ocfagb/hacktivity-vulns-exploits-lab | 2026-08-27 |
What each source reports
NVD Score used
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.
- Record
CVE-2010-1240- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.
- Record
CVE-2010-1240- Updated
- 2026-11-02
EUVDEUVD-2010-1270No score
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.
- Record
EUVD-2010-1270- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r9c9-qvgh-48mxNo score
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not...
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.
- Record
GHSA-r9c9-qvgh-48mx- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2010/1636
adobe.com/support/security/bulletins/apsb10-15.html
blog.didierstevens.com/2010/03/29/escape-from-pdf
us-cert.gov/cas/techalerts/TA10-231A.html
securitytracker.com/id?1024159
lists.immunitysec.com/pipermail/dailydave/2010-April/006075.html
Show 61 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7466
nvd.nist.gov/vuln/detail/CVE-2010-1240
github.com/advisories/GHSA-r9c9-qvgh-48mx
access.redhat.com/errata/RHSA-2010:0503
bugzilla.redhat.com/show_bug.cgi?id=600692
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0503.json
cve.org/CVERecord?id=CVE-2010-1240
cisa.gov/known-exploited-vulnerabilities-catalog