Improper validation of array index in Adobe Acrobat and Adobe Reader - CVE-2010-3631

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper validation of array index when processing images within PDF documents. A remote attacker can create a specially crafted PDF document, trick the victim into opening it, cause memory corruption and execute arbitrary code on vulnerable system.

Successful exploitation of the vulnerability results in compromise of vulnerable system.

Affected software

How to mitigate CVE-2010-3631

Links to Public Exploits and PoC-codes

• Exploit #716 - Adobe Acrobat and Reader - Array Indexing Remote Code Execution (March 18, 2020)

External References

• http://www.adobe.com/support/security/bulletins/apsb10-21.html

Related Security Bulletins

• Multiple vulnerabilities in Adobe Reader and Acrobat
• openSUSE update for flash-player