Adobe · Reader and Acrobat
CVE-2010-0188
Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
Exploited in attacks
Used by ransomware
High 7.8 Attack chance: 88%
What it is
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
CISA: Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: March 24, 2022
- Added to the CISA list
- March 3, 2022
- Published
- February 21, 2010
- Severity
- High 7.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 88% in the top 0.2% of all known vulnerabilities
- Weakness
- CWE-94
- More details
- NVD · CVE.org · CISA
All references (10)
- http://www.redhat.com/support/errata/RHSA-2010-0114.html
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
- http://www.vupen.com/english/advisories/2010/0399
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56297
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8697
- http://www.adobe.com/support/security/bulletins/apsb10-07.html
- http://secunia.com/advisories/38639
- http://www.securityfocus.com/bid/38195
- http://securitytracker.com/id?1023601
- http://secunia.com/advisories/38915
More exploited flaws from Adobe
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jun 8, 2022 | Universal 3D Memory Corruption | Reader and Acrobat | High 8.8 | 89% |
| May 25, 2022 | Sandbox Bypass | Reader and Acrobat | High 8.8 | 22% |
| Mar 28, 2022 | Arbitrary Integer Overflow | Reader and Acrobat | High 8.8 | 67% |
| Mar 25, 2022 | Reader and Adobe Acrobat Stack-Based Buffer Overflow | Reader and Acrobat | High 8.8 | 97% |
| Mar 3, 2022 | Memory Corruption | Reader and Acrobat | High 7.8 | 87% |
| Mar 3, 2022 | Memory Corruption | Reader and Acrobat | High 8.8 | 79% |
| Mar 3, 2022 | Use-After-Free | Reader and Acrobat | High 8.8 | 40% |
| Oct 27, 2026 | Unrestricted Upload of File with Dangerous Type | Commerce and Magento | Critical 9.3 | 31% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.