CVE-2010-1278

Description

Buffer overflow in the Atlcom.get_atlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters.

Affected products

• adobe / acrobat9.2 – 9.2
• adobe / acrobat8.1 – 8.1
• adobe / acrobat8.1.1 – 8.1.1
• adobe / acrobat8.1.2 – 8.1.2
• adobe / acrobat8.1.3 – 8.1.3
• adobe / acrobat8.1.4 – 8.1.4
• adobe / acrobat8.1.5 – 8.1.5
• adobe / acrobat8.1.6 – 8.1.6
• adobe / acrobat8.1.7 – 8.1.7
• adobe / acrobat9.0 – 9.0
• adobe / acrobat9.1 – 9.1
• adobe / acrobat9.1.1 – 9.1.1
• adobe / acrobat9.1.2 – 9.1.2
• adobe / acrobat9.1.3 – 9.1.3
• adobe / acrobat8.0 – 8.0
• adobe / reader8.1.1 – 8.1.1
• adobe / reader8.1.2 – 8.1.2
• adobe / reader8.1.4 – 8.1.4
• adobe / reader8.1.5 – 8.1.5
• adobe / reader8.1.6 – 8.1.6
• adobe / reader8.1.7 – 8.1.7
• adobe / reader9.0 – 9.0
• adobe / reader9.1 – 9.1
• adobe / reader9.1.1 – 9.1.1
• adobe / reader9.1.2 – 9.1.2
• adobe / reader9.1.3 – 9.1.3
• adobe / reader9.2 – 9.2
• adobe / reader8.0.0 – 8.0.0

References

• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-10-077/
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7500
• MISChttp://www.securityfocus.com/archive/1/510868/100/0/threaded
• VENDOR_ADVISORYhttp://www.adobe.com/support/security/bulletins/apsb10-02.html
• MISChttp://www.securitytracker.com/id?1023908