SB2010021601 - Two vulnerabilities in Adobe Acrobat and Adobe Reader

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2010021601

SB2010021601 - Two vulnerabilities in Adobe Acrobat and Adobe Reader

Published: February 16, 2010 Updated: March 22, 2017

Security Bulletin ID SB2010021601
Severity
Low
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Denial of service (CVE-ID: CVE-2010-0186)

The vulnerability allows a remote attacker to cause denial of service (DoS) on the target system.

The vulnerability exists due to improper permissions control. A remote attacker can trick the victim into visiting a specially crafted Web site, bypass cross-domain sandbox controls and send unauthorized cross-domain requests to cause the application to crash.

Successful exploitation of this vulnerability may result in denial of service.


2) Arbitrary code execution (CVE-ID: CVE-2010-0188)

The vulnerability allows a remote attacker to gain elevated privileges on the target system.

The vulnerability exists due to improper permissions control. A remote attacker can gain elevated privileges, cause the target application to crash or even execute arbitrary code.

Successful exploitation of this vulnerability may result in arbitrary code execution.


Remediation

Install update from vendor's website.

References