9.3

CVE-2010-1240: adobe acrobat_reader

CVSS: 9.3v2.0HighModified
Published 05-04-2010Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2010-1240 is a high (CVSS 9.3) vulnerability in adobe acrobat_reader. EPSS estimates a 73.62% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 6 public exploits are recorded.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.3/10
010
High · v2.0 (NVD)
EPSS score
73.62%
0%100%
Critical · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits6reference, exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 1
RHSA-2010:0503

Timeline

  1. 05-04-2010
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of one text field in the Launch File warning dialog, which makes it easier for remote attackers to trick users into executing an arbitrary local program that was specified in a PDF document, as demonstrated by a text field that claims that the Open button will enable the user to read an encrypted message.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

73.62%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 73.62% on 21-09-2026

21-09-202621-10-2026
EPSS score
73.62%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

6 found
  • referenceUnverified

    Exploit Reference (blog.didierstevens.com)

    Maturity: unknown

  • exploit-databaselocalwindowsVerified

    Adobe PDF - Embedded EXE Social Engineering (Metasploit)

    Maturity: weaponized

  • exploit-databaselocalwindowsVerified

    Adobe PDF - Escape EXE Social Engineering (No JavaScript) (Metasploit)

    Maturity: weaponized

Show all 6 exploits
  • exploit-databaselocalwindowsVerified

    Adobe Reader - Escape From '.PDF' Execute Embedded Executable

    Maturity: weaponized

  • MetasploitMetasploitremoteVerified

    Adobe PDF Embedded EXE Social Engineering

    exploit/windows/fileformat/adobe_pdf_embedded_exe

    Maturity: weaponized

  • MetasploitMetasploitremoteVerified

    Adobe PDF Escape EXE Social Engineering (No JavaScript)

    exploit/windows/fileformat/adobe_pdf_embedded_exe_nojs

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Adobe1 product

1 vendor · 1 product

References

8 links