CVE-2010-2889

2010-10-0617:00:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2010-2889

adobe

adobe reader

acrobat

vulnerability

arbitrary code

font

windows

mac os x

nvd

7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.018 Low

EPSS

Percentile

88.3%

JSON

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-3626.

CPENameOperatorVersion
adobe:acrobatadobe acrobateq8.0
adobe:acrobatadobe acrobateq8.1.7
adobe:acrobatadobe acrobateq8.2.1
adobe:acrobatadobe acrobateq8.1.2
adobe:acrobat_readeradobe acrobat readereq8.1.6
adobe:acrobat_readeradobe acrobat readereq8.2.3
adobe:acrobat_readeradobe acrobat readereq8.2
adobe:acrobat_readeradobe acrobat readereq8.2.2
adobe:acrobatadobe acrobateq8.2.4
adobe:acrobatadobe acrobateq8.1.1

CPE	Name	Operator	Version
adobe:acrobat	adobe acrobat	eq	8.0
adobe:acrobat	adobe acrobat	eq	8.1.7
adobe:acrobat	adobe acrobat	eq	8.2.1
adobe:acrobat	adobe acrobat	eq	8.1.2
adobe:acrobat_reader	adobe acrobat reader	eq	8.1.6
adobe:acrobat_reader	adobe acrobat reader	eq	8.2.3
adobe:acrobat_reader	adobe acrobat reader	eq	8.2
adobe:acrobat_reader	adobe acrobat reader	eq	8.2.2
adobe:acrobat	adobe acrobat	eq	8.2.4
adobe:acrobat	adobe acrobat	eq	8.1.1