Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4091
HistoryNov 07, 2010 - 10:00 p.m.

CVE-2010-4091

2010-11-0722:00:03
CWE-119
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.846 High

EPSS

Percentile

98.5%

JSON

The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
adobeacrobat_readerMatch8.0
OR
adobeacrobat_readerMatch8.1
OR
adobeacrobat_readerMatch8.1.1
OR
adobeacrobat_readerMatch8.1.2
OR
adobeacrobat_readerMatch8.1.4
OR
adobeacrobat_readerMatch8.1.5
OR
adobeacrobat_readerMatch8.1.6
OR
adobeacrobat_readerMatch8.1.7
OR
adobeacrobat_readerMatch8.2
OR
adobeacrobat_readerMatch8.2.1
OR
adobeacrobat_readerMatch8.2.2
OR
adobeacrobat_readerMatch8.2.3
OR
adobeacrobat_readerMatch8.2.4
OR
adobeacrobat_readerMatch9.0
OR
adobeacrobat_readerMatch9.1
OR
adobeacrobat_readerMatch9.1.1
OR
adobeacrobat_readerMatch9.1.2
OR
adobeacrobat_readerMatch9.1.3
OR
adobeacrobat_readerMatch9.2
OR
adobeacrobat_readerMatch9.3
OR
adobeacrobat_readerMatch9.3.1
OR
adobeacrobat_readerMatch9.3.2
OR
adobeacrobat_readerMatch9.3.3
OR
adobeacrobat_readerMatch9.3.4
OR
adobeacrobat_readerMatch9.4
OR
adobeacrobat_readerMatch10.0
AND
applemac_os_x
OR
microsoftwindows
Node
adobeacrobatMatch8.0
OR
adobeacrobatMatch8.1
OR
adobeacrobatMatch8.1.1
OR
adobeacrobatMatch8.1.2
OR
adobeacrobatMatch8.1.3
OR
adobeacrobatMatch8.1.4
OR
adobeacrobatMatch8.1.5
OR
adobeacrobatMatch8.1.6
OR
adobeacrobatMatch8.1.7
OR
adobeacrobatMatch8.2
OR
adobeacrobatMatch8.2.1
OR
adobeacrobatMatch8.2.2
OR
adobeacrobatMatch8.2.3
OR
adobeacrobatMatch8.2.4
OR
adobeacrobatMatch9.0
OR
adobeacrobatMatch9.1
OR
adobeacrobatMatch9.1.1
OR
adobeacrobatMatch9.1.2
OR
adobeacrobatMatch9.1.3
OR
adobeacrobatMatch9.2
OR
adobeacrobatMatch9.3
OR
adobeacrobatMatch9.3.1
OR
adobeacrobatMatch9.3.2
OR
adobeacrobatMatch9.3.3
OR
adobeacrobatMatch9.3.4
OR
adobeacrobatMatch9.4
OR
adobeacrobatMatch10.0
AND
applemac_os_x
OR
microsoftwindows

References

Related

openvas 13
cve 1
ubuntucve 1
prion 1
cvelist 1
checkpoint_advisories 2
nessus 19
suse 2
redhat 1
gentoo 2
securityvulns 2
openvas
openvas
Adobe Acrobat and Reader 'printSeps()' Function Heap Corruption Vulnerability
2010-11-23 00:00:00
Adobe Reader 'printSeps()' Function Heap Corruption Vulnerability
2010-11-23 00:00:00
Adobe Acrobat and Reader 'printSeps()' Function Heap Corruption Vulnerability
2010-11-23 00:00:00
cve
cve
CVE-2010-4091
2010-11-07 22:00:03
ubuntucve
ubuntucve
CVE-2010-4091
2010-11-07 00:00:00
prion
prion
Memory corruption
2010-11-07 22:00:00
cvelist
cvelist
CVE-2010-4091
2010-11-07 21:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Reader JavaScript printSeps Function Heap Corruption (APSB10-28) - Ver2 (CVE-2010-4091)
2015-03-26 00:00:00
Adobe Reader JavaScript printSeps Function Heap Corruption (APSB10-28; CVE-2010-4091)
2010-11-16 00:00:00
nessus
nessus
openSUSE Security Update : acroread (openSUSE-SU-2010:1030-1)
2014-06-13 00:00:00
SuSE 11 / 11.1 Security Update : Acrobat Reader (SAT Patch Numbers 3634 / 3636)
2010-12-09 00:00:00
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 7267)
2011-01-27 00:00:00
suse
suse
remote code execution in acoread
2010-12-08 17:17:01
remote code execution in acroread
2011-03-07 16:51:18
redhat
redhat
(RHSA-2010:0934) Critical: acroread security update
2010-12-01 00:00:00
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2011-01-21 00:00:00
Adobe Reader: Multiple vulnerabilities
2012-01-30 00:00:00
securityvulns
securityvulns
Adobe Reader / Acrobat multiple security vulnerabilities
2011-02-14 00:00:00
Security updates available for Adobe Reader and Acrobat
2011-02-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.846 High

EPSS

Percentile

98.5%

JSON
Related for NVD:CVE-2010-4091
openvas13cve1ubuntucve1prion1cvelist1checkpoint_advisories2nessus19suse2redhat1gentoo2securityvulns2