← Database

CVE-2010-2168

CRITICAL CVSS: 9.3 Published: 2010-06-30 Modified: 2026-06-16

Description

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content, involving the newfunction (0x44) operator and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-1285 and CVE-2010-2201.

Affected Platforms

Adobe AcrobatAdobe Acrobat ReaderMicrosoft WindowsApple Mac Os X

Weakness Type

CWE-399

References