CVE-2010-2201: Adobe Acrobat

High severity, CVSS 9.3. EPSS: 14.3% chance of exploitation in the next 30 days.

Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via a PDF file with crafted Flash content involving the (1) pushstring (0x2C) operator, (2) debugfile (0xF1) operator, and an "invalid pointer vulnerability" that triggers memory corruption, a different vulnerability than CVE-2010-1285 and CVE-2010-2168.

Affected products

• Adobe Acrobat: version 9.0 only; version 9.1 only; version 9.1.1 only; version 9.1.2 only; version 9.1.3 only; version 9.2 only; …
• Adobe Acrobat Reader: version 9.0 only; version 9.1 only; version 9.1.1 only; version 9.1.2 only; version 9.1.3 only; version 9.2 only; …

Published 2010-06-30. Last modified 2026-06-16.