CVE-2010-1241
Status: ModifiedHigh (9.3)—
Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.
CVSS
- Version: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Base score: 9.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 9.21%
- Percentile among all scored CVEs: 95
- Score date: 10/11/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-119
References
- http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/
- http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html
- http://www.adobe.com/support/security/bulletins/apsb10-09.html
- http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li
- http://www.securityfocus.com/bid/39227
- http://www.securityfocus.com/bid/39329
- http://www.us-cert.gov/cas/techalerts/TA10-103C.html
- http://www.vupen.com/english/advisories/2010/0873
- http://www.youtube.com/watch?v=9EVHtY1-0q8
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57589
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940
- http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/
- http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html
- http://www.adobe.com/support/security/bulletins/apsb10-09.html
- http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li
- http://www.securityfocus.com/bid/39227
- http://www.securityfocus.com/bid/39329
- http://www.us-cert.gov/cas/techalerts/TA10-103C.html
- http://www.vupen.com/english/advisories/2010/0873
- http://www.youtube.com/watch?v=9EVHtY1-0q8
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57589
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940
Raw JSON (NVD)
Show
{
"id": "CVE-2010-1241",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-04-05T15:30:01.343",
"references": [
{
"url": "http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/39227",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/39329",
"source": "cve@mitre.org"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA10-103C.html",
"tags": [
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2010/0873",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.youtube.com/watch?v=9EVHtY1-0q8",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57589",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940",
"source": "cve@mitre.org"
},
{
"url": "http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.adobe.com/support/security/bulletins/apsb10-09.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/39227",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/39329",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA10-103C.html",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2010/0873",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.youtube.com/watch?v=9EVHtY1-0q8",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/57589",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005."
},
{
"lang": "es",
"value": "El desbordamiento de búfer en la región heap de la memoria en el sistema de administración de la pila personalizado en Reader y Acrobat versiones 9.x anteriores a 9.3.2, y versiones 8.x anteriores a 8.2.2 de Adobe en Windows y Mac OS X, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) por medio de un documento PDF especialmente diseñado, también se conoce como FG-VD-10-005."
}
],
"lastModified": "2026-06-16T23:17:56.283",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97E20936-EE31-4CEB-A710-3165A28BAD69"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39F6994B-6969-485B-9286-2592B11A47BF"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC533775-B52E-43F0-BF19-1473BE36232D"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4670451-511E-496C-A78A-887366E1E992"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A2A4F62-7AB5-4134-9A65-4B4E1EA262A3"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35994F76-CD13-4301-9134-FC0CBEA37D97"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "562772F1-1627-438E-A6B8-7D1AA5536086"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F25C9167-C6D4-4264-9197-50878EDA2D96"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5C251D2-4C9B-4029-8BED-0FCAED3B8E89"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2432AC17-5378-4C61-A775-5172FD44EC03"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6BA82F4-470D-4A46-89B2-D2F3C8FA31C8"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39EDED39-664F-4B68-B422-2CCCA3B83550"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
},
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}