12345qwert123456/cve-2010-1240Python tool for CVE-2010-1240 research - generates malicious PDFs exploiting Adobe Reader Launch Actions
Educational research tool demonstrating CVE-2010-1240 vulnerability in Adobe Reader through malicious PDF Launch Actions.
This tool is created strictly for educational purposes and security research to demonstrate CVE-2010-1240 vulnerability. It should only be used in controlled environments for learning about PDF security mechanisms and vulnerability research.
Do not use this tool for malicious purposes.
This project demonstrates CVE-2010-1240, a critical vulnerability in Adobe Reader that allows arbitrary code execution through malicious PDF Launch Actions. The vulnerability affects Adobe Reader and Acrobat versions prior to 9.3.3 and 8.2.3.
git clone https://github.com/12345qwert123456/cve-2010-1240.git
cd cve-2010-1240
# Create a basic CVE-2010-1240 demonstration PDF
python pdf_generator.py
# Create PDF with custom PowerShell payload
python pdf_generator.py -c "Write-Host 'CVE-2010-1240 Demo'; pause"
# Specify output filename
python pdf_generator.py -o cve_demo.pdf
When a malicious PDF is opened in vulnerable Adobe Reader versions, the Launch Action triggers a security dialog:
The Adobe Reader security warning showing the Launch Action attempting to execute PowerShell
After bypassing the security dialog, the CVE-2010-1240 exploit successfully executes the PowerShell payload:
PowerShell window opened by the PDF Launch Action exploit showing successful code execution
Advanced attackers can use line breaks and formatting to disguise the actual command being executed:
Demonstration of how attackers can manipulate the Launch Action dialog to display benign text while executing malicious commands
This technique exploits user psychology by showing innocuous text in the dialog while the actual malicious command is hidden through careful formatting and line breaks.
Example of payload:
pdf_generator.py -o poc.pdf -c "Write-Host \"'CVE-2010-1240 PoC'; pause\"\n\n\n\n\n\n\n# Press Open Button"
usage: pdf_generator.py [-h] [-o OUTPUT] [-c COMMAND]
CVE-2010-1240 PDF Launch Action Research Tool
options:
-h, --help show this help message and exit
-o OUTPUT, --output OUTPUT
Output PDF filename (default: cve_2010_1240_demo.pdf)
-c COMMAND, --command COMMAND
PowerShell command to execute
CVE-2010-1240 is a critical vulnerability that affects Adobe Reader and Acrobat through improper handling of Launch Actions in PDF documents. The vulnerability allows remote attackers to execute arbitrary code by crafting malicious PDF files that abuse the Launch Action mechanism.
The generated PDF exploits CVE-2010-1240 through:
❌ Vulnerable:
✅ Patched: