CVE-2010-1241

Heap-based buffer overflow in the custom heap management system in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, aka FG-VD-10-005.

• CWE-119

• http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/Exploit
• http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html
• http://www.adobe.com/support/security/bulletins/apsb10-09.html
• http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li
• http://www.securityfocus.com/bid/39227
• http://www.securityfocus.com/bid/39329
• http://www.us-cert.gov/cas/techalerts/TA10-103C.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2010/0873Vendor Advisory
• http://www.youtube.com/watch?v=9EVHtY1-0q8
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57589
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940
• http://blog.fortinet.com/the-upcoming-blackhat-europe-2010-presentation/Exploit
• http://lists.immunitysec.com/pipermail/dailydave/2010-April/006077.html
• http://www.adobe.com/support/security/bulletins/apsb10-09.html
• http://www.blackhat.com/html/bh-eu-10/bh-eu-10-briefings.html#Li
• http://www.securityfocus.com/bid/39227
• http://www.securityfocus.com/bid/39329
• http://www.us-cert.gov/cas/techalerts/TA10-103C.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2010/0873Vendor Advisory
• http://www.youtube.com/watch?v=9EVHtY1-0q8
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57589
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6940

Published

Apr 5, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1235Unspecified vulnerability in Google Chrome before 4.1.249.10…
• CVE-2010-1236The protocolIs function in platform/KURLGoogle.cpp in WebCor…
• CVE-2010-1237Google Chrome 4.1 BETA before 4.1.249.1036 allows remote att…
• CVE-2010-1238MoinMoin 1.7.1 allows remote attackers to bypass the textcha…
• CVE-2010-1239Foxit Reader before 3.2.1.0401 allows remote attackers to (1…
• CVE-2010-1240Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.…
• CVE-2010-1242Multiple cross-site scripting (XSS) vulnerabilities in the I…
• CVE-2010-1243The IBM Web Interface for Content Management (aka WEBi) befo…
• CVE-2010-1244Cross-site request forgery (CSRF) vulnerability in createDes…
• CVE-2010-1245Unspecified vulnerability in Microsoft Office Excel 2002 SP3…
• CVE-2010-1246Stack-based buffer overflow in Microsoft Office Excel 2002 S…
• CVE-2010-1247Unspecified vulnerability in Microsoft Office Excel 2002 SP3…