CVE-2010-2883

High · 7.3 CISA KEV

CVSS

7.3

EPSS

81.4%

Published

Sep 9, 2010

CISA due date

Jun 22, 2022

The record

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

Affected packages

Ecosystem	Package	Fixed
Red Hat:rhel_extras:4	acroread	0:9.4.0-1.el4
Red Hat:rhel_extras:4	acroread-plugin	0:9.4.0-1.el4
Red Hat:rhel_extras:5::client	acroread	0:9.4.0-1.el5
Red Hat:rhel_extras:5::client	acroread-plugin	0:9.4.0-1.el5
Red Hat:rhel_extras:5::server	acroread	0:9.4.0-1.el5
Red Hat:rhel_extras:5::server	acroread-plugin	0:9.4.0-1.el5

Related vulnerabilities

CVE-2011-2462 Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and… Also affects acroread
CVE-2011-2140 Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before… Also affects acroread
CVE-2011-2415 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
CVE-2011-2414 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
CVE-2011-2130 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
CVE-2011-2137 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
CVE-2011-2134 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… Also affects acroread
CVE-2011-2095 Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x… Also affects acroread