製品・ソフトウェアに関する情報

JVN脆弱性詳細

Adobe Reader および Acrobat における任意のコードを実行される脆弱性

Title	Adobe Reader および Acrobat における任意のコードを実行される脆弱性
Summary	Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。本脆弱性は、CVE-2010-1295、CVE-2010-2207、CVE-2010-2209、CVE-2010-2210、CVE- 2010-2211 および CVE-2010-2212 とは異なる脆弱性です。
Possible impacts	攻撃者により、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	June 29, 2010, midnight
Registration Date	July 21, 2010, 4:27 p.m.
Last Update	July 21, 2010, 4:27 p.m.

CVSS2.0 : 危険
Score	9.3
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected System

レッドハット

Red Hat Enterprise Linux Extras 4 extras

Red Hat Enterprise Linux Extras 4.8.z extras

RHEL Desktop Supplementary 5 (client)

RHEL Supplementary 5 (server)

RHEL Supplementary EUS 5.4.z (server)

アドビシステムズ

Adobe Acrobat 9.3.2 およびそれ以前

Adobe Reader 9.3.2 およびそれ以前

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-2202	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2202
National Vulnerability Database (NVD)
2	CVE-2010-2202	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-2202

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Adobe Security Bulletin
1	APSB10-15	http://www.adobe.com/support/security/bulletins/apsb10-15.html
Adobe セキュリティ情報
2	APSB10-15	http://www.adobe.com/jp/support/security/bulletins/apsb10-15.html
Red Hat Security Advisory
3	RHSA-2010:0503	https://rhn.redhat.com/errata/RHSA-2010-0503.html
富士通セキュリティ情報
4	TA10-159A	http://software.fujitsu.com/jp/security/vulnerabilities/ta10-159a.html
5	TA10-162A	http://software.fujitsu.com/jp/security/vulnerabilities/ta10-162a.html

その他

No	Name	URL
IPA 緊急対策情報
1	20100611-adobe	http://www.ipa.go.jp/security/ciadr/vul/20100611-adobe.html
JPCERT 緊急報告
2	JPCERT-AT-2010-0015	https://www.jpcert.or.jp/at/2010/at100015.txt
3	JPCERT-AT-2010-0017	https://www.jpcert.or.jp/at/2010/at100017.txt
JVN
4	JVNTA10-159A	http://jvn.jp/cert/JVNTA10-159A/index.html
5	JVNTA10-162A	http://jvn.jp/cert/JVNTA10-162A/index.html
JVN Status Tracking Notes
6	JVNTR-2010-16	http://jvn.jp/tr/JVNTR-2010-16
SecurityFocus
7	41234	http://www.securityfocus.com/bid/41234
US-CERT Cyber Security Alerts
8	SA10-159A	http://www.us-cert.gov/cas/alerts/SA10-159A.html
9	SA10-162A	http://www.us-cert.gov/cas/alerts/SA10-162A.html
US-CERT Technical Cyber Security Alert
10	TA10-159A	http://www.us-cert.gov/cas/techalerts/TA10-159A.html
11	TA10-162A	http://www.us-cert.gov/cas/techalerts/TA10-162A.html
VUPEN Security
12	VUPEN/ADV-2010-1636	http://www.vupen.com/english/advisories/2010/1636
警察庁 @police
13	アドビシステムズ社の Adobe Reader および Adobe Acrobat のセキュリティ修正プログラムについて	http://www.npa.go.jp/cyberpolice/#topics

Change Log

No	Changed Details	Date of change
0	[2010年07月21日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2010-2202

Summary	Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-1295, CVE-2010-2207, CVE-2010-2209, CVE-2010-2210, CVE-2010-2211, and CVE-2010-2212.
Publication Date	July 1, 2010, 3:30 a.m.
Registration Date	Jan. 29, 2021, 11:02 a.m.
Last Update	Nov. 21, 2024, 10:16 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat:9.0:::::::*
cpe:2.3:a:adobe:acrobat:9.1:::::::*
cpe:2.3:a:adobe:acrobat:9.1.1:::::::*
cpe:2.3:a:adobe:acrobat:9.1.2:::::::*
cpe:2.3:a:adobe:acrobat:9.1.3:::::::*
cpe:2.3:a:adobe:acrobat:9.2:::::::*
cpe:2.3:a:adobe:acrobat:9.3:::::::*
cpe:2.3:a:adobe:acrobat:9.3.1:::::::*
cpe:2.3:a:adobe:acrobat:9.3.2:::::::*
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat_reader:9.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.3:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.3:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.3.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.3.2:::::::*
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::

Configuration3		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat:8.0:::::::*
cpe:2.3:a:adobe:acrobat:8.1:::::::*
cpe:2.3:a:adobe:acrobat:8.1.1:::::::*
cpe:2.3:a:adobe:acrobat:8.1.2:::::::*
cpe:2.3:a:adobe:acrobat:8.1.3:::::::*
cpe:2.3:a:adobe:acrobat:8.1.4:::::::*
cpe:2.3:a:adobe:acrobat:8.1.5:::::::*
cpe:2.3:a:adobe:acrobat:8.1.6:::::::*
cpe:2.3:a:adobe:acrobat:8.1.7:::::::*
cpe:2.3:a:adobe:acrobat:8.2:::::::*
cpe:2.3:a:adobe:acrobat:8.2.1:::::::*
cpe:2.3:a:adobe:acrobat:8.2.2:::::::*
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::

Configuration4		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat_reader:8.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.4:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.6:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.7:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.2.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.2.2:::::::*
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::

Related information, measures and tools

No	URL	タグ
1	http://www.adobe.com/support/security/bulletins/apsb10-15.html	Patch Vendor Advisory
2	http://www.adobe.com/support/security/bulletins/apsb10-15.html	Patch Vendor Advisory
3	http://www.securityfocus.com/bid/41234
4	http://www.securityfocus.com/bid/41234
5	http://www.securitytracker.com/id?1024159
6	http://www.securitytracker.com/id?1024159
7	http://www.vupen.com/english/advisories/2010/1636
8	http://www.vupen.com/english/advisories/2010/1636
9	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7336
10	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7336

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat:9.0:::::::*
cpe:2.3:a:adobe:acrobat:9.1:::::::*
cpe:2.3:a:adobe:acrobat:9.1.1:::::::*
cpe:2.3:a:adobe:acrobat:9.1.2:::::::*
cpe:2.3:a:adobe:acrobat:9.1.3:::::::*
cpe:2.3:a:adobe:acrobat:9.2:::::::*
cpe:2.3:a:adobe:acrobat:9.3:::::::*
cpe:2.3:a:adobe:acrobat:9.3.1:::::::*
cpe:2.3:a:adobe:acrobat:9.3.2:::::::*
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat_reader:9.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.1.3:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.3:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.3.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:9.3.2:::::::*
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::

Configuration3		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat:8.0:::::::*
cpe:2.3:a:adobe:acrobat:8.1:::::::*
cpe:2.3:a:adobe:acrobat:8.1.1:::::::*
cpe:2.3:a:adobe:acrobat:8.1.2:::::::*
cpe:2.3:a:adobe:acrobat:8.1.3:::::::*
cpe:2.3:a:adobe:acrobat:8.1.4:::::::*
cpe:2.3:a:adobe:acrobat:8.1.5:::::::*
cpe:2.3:a:adobe:acrobat:8.1.6:::::::*
cpe:2.3:a:adobe:acrobat:8.1.7:::::::*
cpe:2.3:a:adobe:acrobat:8.2:::::::*
cpe:2.3:a:adobe:acrobat:8.2.1:::::::*
cpe:2.3:a:adobe:acrobat:8.2.2:::::::*
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::

Configuration4		or higher	or less	more than	less than
cpe:2.3:a:adobe:acrobat_reader:8.0:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.2:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.4:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.5:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.6:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.1.7:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.2.1:::::::*
cpe:2.3:a:adobe:acrobat_reader:8.2.2:::::::*
execution environment
1	cpe:2.3:o:apple:mac_os_x::::::::
2	cpe:2.3:o:microsoft:windows::::::::