Vulnerability Details : CVE-2010-2202

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212.
Publish Date : 2010-06-30 Last Update Date : 2012-11-05

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Related Tweets Even more tweets Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

Cvss Score	9.3
Confidentiality Impact	Complete (There is total information disclosure, resulting in all system files being revealed.)
Integrity Impact	Complete (There is a total compromise of system integrity. There is a complete loss of system protection, resulting in the entire system being compromised.)
Availability Impact	Complete (There is a total shutdown of the affected resource. The attacker can render the resource completely unavailable.)
Access Complexity	Medium (The access conditions are somewhat specialized. Some preconditions must be satistified to exploit)
Authentication	Not required (Authentication is not required to exploit the vulnerability.)
Gained Access	Admin
Vulnerability Type(s)	Denial Of ServiceExecute CodeOverflowMemory corruption
CWE ID	119

- Additional Vendor Supplied Data

Vendor	Impact	CVSS Score	CVSS Vector	Report Date	Publish Date
Redhat	critical	6.8	AV:N/AC:M/Au:N/C:P/I:P/A:P	2010-06-29	2010-06-29

If you are a vendor and you have additional data which can be automatically imported into our database, please contact admin @ cvedetails.com

- Related OVAL Definitions

Title	Definition Id	Family
Adobe Reader and Acrobat Memory Corruption Vulnerability	oval:org.mitre.oval:def:7336	windows
CVE-2010-2202	oval:org.opensuse.security:def:20102202	unix
RHSA-2010:0503: acroread security update (Critical)	oval:com.redhat.rhsa:def:20100503	unix

OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify a vulnerability or a missing patch. Check out the OVAL definitions if you want to learn what you should do to verify a vulnerability.

- Products Affected By CVE-2010-2202

#	Product Type	Vendor	Product	Version
1	Application	Adobe	Acrobat	8.0.0	Details Vulnerabilities
2	Application	Adobe	Acrobat	8.1	Details Vulnerabilities
3	Application	Adobe	Acrobat	8.1.1	Details Vulnerabilities
4	Application	Adobe	Acrobat	8.1.2	Details Vulnerabilities
5	Application	Adobe	Acrobat	8.1.3	Details Vulnerabilities
6	Application	Adobe	Acrobat	8.1.4	Details Vulnerabilities
7	Application	Adobe	Acrobat	8.1.5	Details Vulnerabilities
8	Application	Adobe	Acrobat	8.1.6	Details Vulnerabilities
9	Application	Adobe	Acrobat	8.1.7	Details Vulnerabilities
10	Application	Adobe	Acrobat	8.2	Details Vulnerabilities
11	Application	Adobe	Acrobat	8.2.1	Details Vulnerabilities
12	Application	Adobe	Acrobat	8.2.2	Details Vulnerabilities
13	Application	Adobe	Acrobat	9.0	Details Vulnerabilities
14	Application	Adobe	Acrobat	9.1	Details Vulnerabilities
15	Application	Adobe	Acrobat	9.1.1	Details Vulnerabilities
16	Application	Adobe	Acrobat	9.1.2	Details Vulnerabilities
17	Application	Adobe	Acrobat	9.1.3	Details Vulnerabilities
18	Application	Adobe	Acrobat	9.2	Details Vulnerabilities
19	Application	Adobe	Acrobat	9.3	Details Vulnerabilities
20	Application	Adobe	Acrobat	9.3.1	Details Vulnerabilities
21	Application	Adobe	Acrobat	9.3.2	Details Vulnerabilities
22	Application	Adobe	Acrobat Reader	8.0	Details Vulnerabilities
23	Application	Adobe	Acrobat Reader	8.1	Details Vulnerabilities
24	Application	Adobe	Acrobat Reader	8.1.1	Details Vulnerabilities
25	Application	Adobe	Acrobat Reader	8.1.2	Details Vulnerabilities
26	Application	Adobe	Acrobat Reader	8.1.4	Details Vulnerabilities
27	Application	Adobe	Acrobat Reader	8.1.5	Details Vulnerabilities
28	Application	Adobe	Acrobat Reader	8.1.6	Details Vulnerabilities
29	Application	Adobe	Acrobat Reader	8.1.7	Details Vulnerabilities
30	Application	Adobe	Acrobat Reader	8.2.1	Details Vulnerabilities
31	Application	Adobe	Acrobat Reader	8.2.2	Details Vulnerabilities
32	Application	Adobe	Acrobat Reader	9.0	Details Vulnerabilities
33	Application	Adobe	Acrobat Reader	9.1	Details Vulnerabilities
34	Application	Adobe	Acrobat Reader	9.1.1	Details Vulnerabilities
35	Application	Adobe	Acrobat Reader	9.1.2	Details Vulnerabilities
36	Application	Adobe	Acrobat Reader	9.1.3	Details Vulnerabilities
37	Application	Adobe	Acrobat Reader	9.2	Details Vulnerabilities
38	Application	Adobe	Acrobat Reader	9.3	Details Vulnerabilities
39	Application	Adobe	Acrobat Reader	9.3.1	Details Vulnerabilities
40	Application	Adobe	Acrobat Reader	9.3.2	Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Adobe	Acrobat	21
Adobe	Acrobat Reader	19

- References For CVE-2010-2202

http://www.securityfocus.com/bid/41234
BID 41234 Adobe Acrobat and Reader CLOD Remote Memory Corruption Vulnerability Release Date:2010-09-07

http://www.securitytracker.com/id?1024159
SECTRACK 1024159

http://www.vupen.com/english/advisories/2010/1636
VUPEN ADV-2010-1636

http://www.adobe.com/support/security/bulletins/apsb10-15.html CONFIRM

- Vulnerability Conditions

Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Adobe Acrobat 9.3.2 Adobe Acrobat 9.3.1 Adobe Acrobat 9.3 Adobe Acrobat 9.2 Adobe Acrobat 9.1.3 Adobe Acrobat 9.1.2 Adobe Acrobat 9.1.1 Adobe Acrobat 9.1 Adobe Acrobat 9.0	Apple Mac Os X Microsoft Windows
Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Adobe Acrobat Reader 9.3.2 Adobe Acrobat Reader 9.3.1 Adobe Acrobat Reader 9.3 Adobe Acrobat Reader 9.2 Adobe Acrobat Reader 9.1.3 Adobe Acrobat Reader 9.1.2 Adobe Acrobat Reader 9.1.1 Adobe Acrobat Reader 9.1 Adobe Acrobat Reader 9.0	Apple Mac Os X Microsoft Windows
Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Adobe Acrobat 8.2 Adobe Acrobat 8.2.2 Adobe Acrobat 8.2.1 Adobe Acrobat 8.1.7 Adobe Acrobat 8.1.6 Adobe Acrobat 8.1.5 Adobe Acrobat 8.1.4 Adobe Acrobat 8.1.3 Adobe Acrobat 8.1.2 Adobe Acrobat 8.1.1 Adobe Acrobat 8.1 Adobe Acrobat 8.0.0	Apple Mac Os X Microsoft Windows
Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Adobe Acrobat Reader 8.2.2 Adobe Acrobat Reader 8.2.1 Adobe Acrobat Reader 8.1.7 Adobe Acrobat Reader 8.1.6 Adobe Acrobat Reader 8.1.5 Adobe Acrobat Reader 8.1.4 Adobe Acrobat Reader 8.1.2 Adobe Acrobat Reader 8.1.1 Adobe Acrobat Reader 8.1 Adobe Acrobat Reader 8.0	Apple Mac Os X Microsoft Windows

- Metasploit Modules Related To CVE-2010-2202

There are not any metasploit modules related to this vulnerability (Please visit www.metasploit.com for more information)