Product:
Adobe Reader and Acrobat
Summary
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors. This vulnerability can lead to application crashes and potential unauthorized code execution.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2010-0188 |
Exploitation
Attackers can exploit this vulnerability by sending specially crafted data to the affected versions of Adobe Reader and Acrobat. The exploitation may not require user interaction, making it easier for attackers to trigger the vulnerability and cause a denial of service or execute arbitrary code.
Affected Products
- Adobe Reader 8.x before 8.2.1
- Adobe Reader 9.x before 9.3.1
- Adobe Acrobat 8.x before 8.2.1
- Adobe Acrobat 9.x before 9.3.1
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions. Keeping software up to date is crucial in protecting against known vulnerabilities.
References
- OpenSUSE Security Announcement
- Secunia Advisory 38639
- Secunia Advisory 38915
- SecurityTracker ID 1023601
- Adobe Security Bulletin APSB10-07
- Red Hat Errata RHSA-2010-0114
- SecurityFocus BID 38195
- VUPEN Advisory 2010/0399
- IBM X-Force Vulnerability 56297
- CISecurity OVAL Definition 8697
- CISA Known Exploited Vulnerabilities Catalog