CVE-2010-1240 Security feature bypass in n/a
Remote attackers can trick users into executing arbitrary local programs by manipulating the Launch File warning dialog in Adobe Reader.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2010-1240?
CVE-2010-1240 is a critical vulnerability in Adobe Acrobat Reader, published on 5 Apr 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.
Weakness: CWE-264
Which versions are affected by CVE-2010-1240?
It affects 1 product.
Products include Adobe Acrobat Reader.
How do I fix CVE-2010-1240?
Upgrade to a fixed version.
Is CVE-2010-1240 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2010-1240 exists.
Public exploit code: 2 Metasploit modules, 3 Exploit-DB entries and 5 proofs of concept on GitHub.
Other vulnerabilities in Adobe Acrobat Reader
Sources
Also known as GHSA-r9c9-qvgh-48mx.