VDB

GSD-2010-2883

GSD-2010-2883 PUBLISHED CVSS 7.300000190734863 HIGH

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

Risk Scores

CVSS v3.1
7.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
n/an/an/a

Timeline

  • Sep 9, 2010 CVE Published
  • Sep 20, 2010 PoC Published
  • Sep 25, 2010 PoC Published
  • Jan 26, 2016 PoC Published
  • May 29, 2018 PoC Published
  • Oct 9, 2020 PoC Published
  • Oct 9, 2020 PoC Published
  • Oct 9, 2020 PoC Published
  • Oct 9, 2020 PoC Published
  • Jul 2, 2021 PoC Published
  • Jan 24, 2023 PoC Published
  • Jun 14, 2023 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›