{"id":"CVE-2010-1241","aliases":["EUVD-2010-1271","GHSA-fcqq-w27v-8hfw","RHSA-2010:0349"],"status":"published","title":"Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x...","description":"Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.09208,"percentile":0.95372,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2010-04-05T15:15:00Z","modified":"2026-06-29T10:03:18Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el5"}]}],"bundled":15}],"products":[{"vendor":"adobe","product":"acrobat_reader"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/57589","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/39227","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2010/0873","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-103C.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.securityfocus.com/bid/39329","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-09.html","tags":["x_refsource_CONFIRM","x_transferred","article"]},{"url":"http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.youtube.com/watch?v=9EVHtY1-0q8","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1241","tags":["advisory"]},{"url":"http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation"},{"url":"https://github.com/advisories/GHSA-fcqq-w27v-8hfw"},{"url":"https://access.redhat.com/errata/RHSA-2010:0349","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=579213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=581417","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0349.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0190","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0190","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0191","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0191","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0192","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0192","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0193","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0194","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0194","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0194","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0195","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0195","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0196","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0196","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0197","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0197","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0198","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0199","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0199","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0199","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0201","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0202","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0202","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0202","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0203","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0204","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1241","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1241","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-1241","description":"Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.","status":"published","published":"2010-04-05T15:15:00Z","modified":"2024-08-07T01:14:06.842Z","updated_at":"2026-11-02T14:33:29.227451Z"}],"euvd":[{"id":"EUVD-2010-1271","description":"Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.","status":"published","published":"2010-04-05T15:15:00Z","modified":"2024-08-07T01:14:06Z","updated_at":"2026-11-03T01:39:42.27518Z"}],"ghsa":[{"id":"GHSA-fcqq-w27v-8hfw","title":"Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x...","description":"Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.","status":"published","published":"2022-05-02T06:20:34Z","modified":"2025-04-11T03:34:32Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:05.37302Z"}],"nvd":[{"id":"CVE-2010-1241","description":"Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.","status":"published","published":"2010-04-05T15:30:01.343Z","modified":"2026-06-16T23:17:56.283Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:43.639743Z"}],"osv":[{"id":"RHSA-2010:0349","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T06:47:01Z","modified":"2026-06-29T10:03:18Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}