Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-2204 — Adobe Acrobat vulnerability

5 documents5 sources
Severity
9.3CRITICALNVD
EPSS
4.6%
top 10.75%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Adobe AcrobatAdobe Acrobat Reader
Timeline
PublishedJun 30
Latest updateMay 14

Description

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDadobe/acrobat_reader19 versions+18
▶NVDadobe/acrobat21 versions+20

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-whxp-44j4-m79c: Unspecified vulnerability in Adobe Reader and Acrobat 9↗2022-05-14
▶

💥Exploits & PoCs

1
Exploit-DB
Adobe Reader 9.3.2 - 'CoolType.dll' Remote Memory Corruption / Denial of Service↗2010-06-29
▶

📋Vendor Advisories

1
Red Hat
acroread: multiple code execution flaws (APSB10-15)↗2010-06-29
▶

💬Community

1
Bugzilla
acroread: multiple code execution flaws (APSB10-15)↗2010-06-29
▶
CVE-2010-2204 — Adobe Acrobat vulnerability | cvebase