What is CVE-2010-2888?

CVE-2010-2888 is a vulnerability in Adobe Acrobat, classified under Improper Input Validation. Published 2010-10-06.

Is CVE-2010-2888 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Adobe Acrobat

CVE-2010-2888

Multiple unspecified vulnerabilities in an ActiveX control in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Windows allow attackers to execute arbitrary code via unknown vectors.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.061 (92.7th percentile) — read the EPSS interpretation.

Affected products

Adobe Acrobat — versions 8.1.7, 8.2.4, 9.3.2
Adobe Acrobat_reader — versions 8.1.7, 8.2.4, 9.3.2
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@adobe.com (US Government Resource, x_refsource_CERT, third-party-advisory)

Frequently asked questions

What is CVE-2010-2888?: CVE-2010-2888 is a vulnerability in Adobe Acrobat, classified under Improper Input Validation. Published 2010-10-06.
Is CVE-2010-2888 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.