RCE in Adobe Acrobat
CVE-2010-0195
Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.056 (92.0th percentile) — read the EPSS interpretation.
Affected products
- Adobe Acrobat — versions 8.0, 9.1, 8.2
- Adobe Acrobat_reader — versions 8.0, 9.1, 9.3
- Apple Mac_os_x
- Microsoft Windows
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@adobe.com (vdb-entry, x_refsource_BID)
- psirt@adobe.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- psirt@adobe.com (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@adobe.com (x_refsource_OVAL, signature, vdb-entry)