CVE:CVE-2010-1278
CNNVD:CNNVD-201004-378
Adobe Reader是非常流行的PDF文件阅读器。
Adobe Download Manager所安装的gp.ocx ActiveX控件在初始化期间将两个参数值拷贝到了固定长度的缓冲区，如果用户受骗访问了恶意网页并传送了超长参数就可以触发缓冲区溢出，导致执行任意代码。
solution:Upgrade adobe reader to a higher version than 8.0.0,8.1.1,8.1.2,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3,9.2,and avoid the version 8.0.0,8.1.1,8.1.2,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3,9.2; Upgrade adobe acrobat to a higher version than 8.0,8.1,8.1.1,8.1.2,8.1.3,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3,9.2,and avoid the version 8.0,8.1,8.1.1,8.1.2,8.1.3,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3,9.2