← CVE Radar
CVE-2010-2883Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.
7.3 HIGHEPSS 81.37%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.3 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jun 22, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2010-2883
- Status
- Analyzed
- Assigner (CNA)
- adobe
- Published
- Sep 9, 2010
- Last modified
- 2026-06-16 23:21 UTC
Affected Products
From NVD CPE configurations.
adobeacrobat2 version ranges
- 8.0 before 8.2.5
- 9.0 before 9.4
adobeacrobat reader2 version ranges
- 8.0 before 8.2.5
- 9.0 before 9.4
References
- blog.metasploit.com http://blog.metasploit.com/2010/09/return-of-unpublished-adobe.html
- community.websense.com http://community.websense.com/blogs/securitylabs/archive/2010/09/10/brief-analysis-on-adobe-reader-sing-table-parsing-vulnerability-cve-2010-2883.aspx
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
- secunia.com http://secunia.com/advisories/41340
- secunia.com http://secunia.com/advisories/43025
- security.gentoo.org http://security.gentoo.org/glsa/glsa-201101-08.xml
- adobe.com http://www.adobe.com/support/security/advisories/apsa10-02.html
- adobe.com http://www.adobe.com/support/security/bulletins/apsb10-21.html
- kb.cert.org http://www.kb.cert.org/vuls/id/491991
- redhat.com http://www.redhat.com/support/errata/RHSA-2010-0743.html
- securityfocus.com http://www.securityfocus.com/bid/43057
- turbolinux.co.jp http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt
- us-cert.gov http://www.us-cert.gov/cas/techalerts/TA10-279A.html
- vupen.com http://www.vupen.com/english/advisories/2010/2331
- vupen.com http://www.vupen.com/english/advisories/2011/0191
- vupen.com http://www.vupen.com/english/advisories/2011/0344
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/61635
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11586
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2883