Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-2883
HistorySep 09, 2010 - 10:00 p.m.

CVE-2010-2883

2010-09-0922:00:02
CWE-119
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.596 Medium

EPSS

Percentile

97.8%

JSON

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
adobeacrobatRange≤9.3.4
OR
adobeacrobatMatch8.0
OR
adobeacrobatMatch8.1
OR
adobeacrobatMatch8.1.1
OR
adobeacrobatMatch8.1.2
OR
adobeacrobatMatch8.1.3
OR
adobeacrobatMatch8.1.4
OR
adobeacrobatMatch8.1.5
OR
adobeacrobatMatch8.1.6
OR
adobeacrobatMatch8.1.7
OR
adobeacrobatMatch8.2
OR
adobeacrobatMatch8.2.1
OR
adobeacrobatMatch8.2.2
OR
adobeacrobatMatch8.2.4
OR
adobeacrobatMatch9.0
OR
adobeacrobatMatch9.1
OR
adobeacrobatMatch9.1.1
OR
adobeacrobatMatch9.1.2
OR
adobeacrobatMatch9.1.3
OR
adobeacrobatMatch9.2
OR
adobeacrobatMatch9.3
OR
adobeacrobatMatch9.3.1
OR
adobeacrobatMatch9.3.2
OR
adobeacrobatMatch9.3.3
AND
applemac_os_x
OR
microsoftwindows
Node
adobeacrobat_readerRange≤9.3.4
OR
adobeacrobat_readerMatch8.0
OR
adobeacrobat_readerMatch8.1
OR
adobeacrobat_readerMatch8.1.1
OR
adobeacrobat_readerMatch8.1.2
OR
adobeacrobat_readerMatch8.1.4
OR
adobeacrobat_readerMatch8.1.5
OR
adobeacrobat_readerMatch8.1.6
OR
adobeacrobat_readerMatch8.1.7
OR
adobeacrobat_readerMatch8.2.1
OR
adobeacrobat_readerMatch8.2.2
OR
adobeacrobat_readerMatch8.2.3
OR
adobeacrobat_readerMatch8.2.4
OR
adobeacrobat_readerMatch9.0
OR
adobeacrobat_readerMatch9.1
OR
adobeacrobat_readerMatch9.1.1
OR
adobeacrobat_readerMatch9.1.2
OR
adobeacrobat_readerMatch9.1.3
OR
adobeacrobat_readerMatch9.2
OR
adobeacrobat_readerMatch9.3
OR
adobeacrobat_readerMatch9.3.1
OR
adobeacrobat_readerMatch9.3.2
OR
adobeacrobat_readerMatch9.3.3
AND
applemac_os_x
OR
microsoftwindows

References

Related

saint 4
metasploit 2
cisa_kev 1
cert 1
prion 1
canvas 1
thn 2
attackerkb 1
seebug 1
openvas 8
threatpost 5
cve 1
packetstorm 1
checkpoint_advisories 2
cvelist 1
exploitdb 2
nessus 11
gentoo 1
redhat 1
suse 1
securityvulns 2
saint
saint
Adobe Reader CoolType.dll buffer overflow
2010-09-17 00:00:00
Adobe Reader CoolType.dll buffer overflow
2010-09-17 00:00:00
Adobe Reader CoolType.dll buffer overflow
2010-09-17 00:00:00
metasploit
metasploit
Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow
2010-09-09 23:23:40
Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow
2010-09-08 23:05:18
cisa_kev
cisa_kev
Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
2022-06-08 00:00:00
cert
cert
Adobe Reader and Acrobat Font Parsing Buffer Overflow Vulnerability
2010-09-14 00:00:00
prion
prion
Stack overflow
2010-09-09 22:00:00
canvas
canvas
Immunity Canvas: ACROBAT_TTF_SING
2010-09-09 22:00:00
thn
thn
Plugx RAT targeting government organizations in Japan using spear phishing
2012-09-11 16:49:00
Chinese Hackers spied on European Diplomats during recent G20 meetings
2013-12-13 02:59:00
attackerkb
attackerkb
CVE-2010-2883
2010-09-09 00:00:00
seebug
seebug
Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow
2014-07-01 00:00:00
openvas
openvas
Adobe Acrobat and Reader SING 'uniqueName' Buffer Overflow Vulnerability - Windows
2010-09-15 00:00:00
Adobe Acrobat and Reader SING 'uniqueName' Buffer Overflow Vulnerability - Linux
2010-09-15 00:00:00
Adobe Acrobat and Reader Multiple Vulnerabilities -Oct10 (Windows)
2010-10-18 00:00:00
threatpost
threatpost
Ongoing Targeted Attack Campaign Going After Defense, Aerospace Industries
2012-01-31 17:05:17
Adobe Exploit Bypasses ASLR and DEP, Drops Signed Malicious File
2010-09-09 15:38:42
New Adobe PDF Zero-Day Flaw Under Attack
2010-09-08 17:50:52
cve
cve
CVE-2010-2883
2010-09-09 22:00:02
packetstorm
packetstorm
Adobe Reader Smart INdependent Glyplets (SING) Table Handling Vulnerability
2010-09-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Reader and Acrobat TTF SING Table Buffer Overflow (APSA10-02; CVE-2010-2883)
2010-09-12 00:00:00
PDF Containing Obfuscated JavaScript Code (CVE-2010-0188; CVE-2010-2883)
2015-02-24 00:00:00
cvelist
cvelist
CVE-2010-2883
2010-09-09 21:00:00
exploitdb
exploitdb
Adobe CoolType - SING Table 'uniqueName' Local Stack Buffer Overflow (Metasploit) (2)
2010-09-25 00:00:00
Adobe CoolType - SING Table 'uniqueName' Remote Stack Buffer Overflow (Metasploit) (1)
2010-09-20 00:00:00
nessus
nessus
Adobe Acrobat < 9.4 / 8.2.5 Multiple Vulnerabilities (APSB10-21)
2010-09-09 00:00:00
GLSA-201101-08 : Adobe Reader: Multiple vulnerabilities
2011-01-24 00:00:00
Adobe Reader < 9.4 / 8.2.5 Multiple Vulnerabilities (APSB10-21)
2010-09-09 00:00:00
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2011-01-21 00:00:00
redhat
redhat
(RHSA-2010:0743) Critical: acroread security update
2010-10-06 00:00:00
suse
suse
remote code execution in acroread
2010-10-11 17:38:18
securityvulns
securityvulns
Security updates available for Adobe Reader and Acrobat
2010-10-06 00:00:00
Adobe Acrobat / Reader multiple security vulnerabilities
2010-10-08 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.596 Medium

EPSS

Percentile

97.8%

JSON
Related for NVD:CVE-2010-2883
saint4metasploit2cisa_kev1cert1prion1canvas1thn2attackerkb1seebug1openvas8threatpost5cve1packetstorm1checkpoint_advisories2cvelist1exploitdb2nessus11gentoo1redhat1suse1securityvulns2