XSS in Adobe Acrobat
CVE-2010-0190
Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.027 (84.4th percentile) — read the EPSS interpretation.
Affected products
- Adobe Acrobat — versions 8.0, 9.1, 8.2
- Adobe Acrobat_reader — versions 8.0, 9.1, 9.3
- Apple Mac_os_x
- Microsoft Windows
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@adobe.com (vdb-entry, x_refsource_BID)
- psirt@adobe.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- psirt@adobe.com (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@adobe.com (x_refsource_OVAL, signature, vdb-entry)