CVE-2010-2201 is a critical arbitrary code execution vulnerability affecting Adobe Reader and Acrobat versions 9.x prior to 9.3.3 and 8.x prior to 8.2.3 on Windows and Mac OS X. It stems from an "invalid pointer vulnerability" triggered by crafted Flash content within a PDF file, specifically involving the pushstring (0x2C) and debugfile (0xF1) operators, leading to memory corruption. This vulnerability carries a CVSS score of 9.3, indicating a severe risk. It can be exploited remotely over a network (AV:N) with medium attack complexity (AC:M) and requires no authentication (Au:N), potentially leading to complete compromise of confidentiality, integrity, and availability (C:C/I:C/A:C). While not listed on CISA's KEV catalog or the Hot List, an exploit is publicly available on ExploitDB (EDB-14982). Despite this, there is minimal community discussion or media coverage surrounding this CVE, suggesting it is not currently a high-profile target.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
9.0CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:* | ||
9.1CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:* | ||
9.1.1CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:* | ||
9.1.2CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:* | ||
9.1.3CPE matchmatch criteria | cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.