CVE-2010-1278

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-22 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the Atlcom.get_atlcom ActiveX control in gp.ocx in Adobe Download Manager, as used in Adobe Reader and Acrobat 8.x before 8.2 and 9.x before 9.3, allows remote attackers to execute arbitrary code via unspecified parameters.

Affected products

Adobe Acrobat for Edge: 8.0, 8.1, 8.1.1, 8.1.2, 8.1.3, 8.1.4 (+9)
Adobe Reader: 8.0.0, 8.1.1, 8.1.2, 8.1.4, 8.1.5, 8.1.6 (+7)

References

http://www.adobe.com/support/security/bulletins/apsb10-02.html
http://www.securityfocus.com/archive/1/510868/100/0/threaded
http://www.securitytracker.com/id?1023908
http://www.zerodayinitiative.com/advisories/ZDI-10-077/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7500
http://www.adobe.com/support/security/bulletins/apsb10-02.html
http://www.securityfocus.com/archive/1/510868/100/0/threaded
http://www.securitytracker.com/id?1023908
http://www.zerodayinitiative.com/advisories/ZDI-10-077/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7500

Get alerted when CVE-2010-1278 or the next vulnerability affects your stack