CVE-2010-2862
NoneCVSS
—
EPSS
16.3%
Published
Aug 5, 2010
CISA due date
—
The record
Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType font with a large maxCompositePoints value in a Maximum Profile (maxp) table.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:4 | acroread | 0 | 0:9.3.4-1.el4 |
| Red Hat:rhel_extras:4 | acroread-plugin | 0 | 0:9.3.4-1.el4 |
| Red Hat:rhel_extras:5::client | acroread | 0 | 0:9.3.4-1.el5 |
| Red Hat:rhel_extras:5::client | acroread-plugin | 0 | 0:9.3.4-1.el5 |
| Red Hat:rhel_extras:5::server | acroread | 0 | 0:9.3.4-1.el5 |
| Red Hat:rhel_extras:5::server | acroread-plugin | 0 | 0:9.3.4-1.el5 |
Related vulnerabilities
- CVE-2011-2462 Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and… Also affects acroread
- CVE-2011-2140 Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before… Also affects acroread
- CVE-2011-2415 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
- CVE-2011-2414 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
- CVE-2011-2130 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
- CVE-2011-2137 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
- CVE-2011-2134 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
- CVE-2011-2095 Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x… Also affects acroread