CVE-2010-2883: adobe acrobat +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2010-2883

CVSS 7.3 · High KEV · sudah dieksploitasi EPSS 81,4%

Kerentanan Out-of-bounds Write pada adobe acrobat, adobe acrobat reader. Skor CVSS 3.1 7.3 (High) menurut NVD. Masuk katalog KEV CISA pada 8 Juni 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

Rincian

Terbit di NVD: 9 September 2010
Terakhir diubah: 16 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.3 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-787: Out-of-bounds Write
EPSS (30 hari): 81,4% peluang dieksploitasi; lebih tinggi dari 99,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
Masuk KEV: 8 Juni 2022
Tenggat CISA: 22 Juni 2022 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: Apply updates per vendor instructions.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
adobe	acrobat	Versi 8.0 hingga sebelum 8.2.5
adobe	acrobat	Versi 9.0 hingga sebelum 9.4
adobe	acrobat reader	Versi 8.0 hingga sebelum 8.2.5
adobe	acrobat reader	Versi 9.0 hingga sebelum 9.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://secunia.com/advisories/41340 broken link · advisory vendor
http://secunia.com/advisories/43025 broken link · advisory vendor
http://www.adobe.com/support/security/advisories/apsa10-02.html advisory vendor
http://www.adobe.com/support/security/bulletins/apsb10-21.html advisory vendor
http://www.vupen.com/english/advisories/2010/2331 broken link · advisory vendor
http://www.vupen.com/english/advisories/2011/0191 broken link · advisory vendor
http://www.vupen.com/english/advisories/2011/0344 broken link · advisory vendor
http://www.kb.cert.org/vuls/id/491991 advisory pihak ketiga · pemerintah AS
http://www.us-cert.gov/cas/techalerts/TA10-279A.html advisory pihak ketiga · pemerintah AS
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2883 pemerintah AS
http://security.gentoo.org/glsa/glsa-201101-08.xml advisory pihak ketiga
http://www.securityfocus.com/bid/43057 broken link · advisory pihak ketiga · vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/61635 advisory pihak ketiga · vdb entry
http://blog.metasploit.com/2010/09/return-of-unpublished-adobe.html broken link
http://community.websense.com/blogs/securitylabs/archive/2010/09/10/brief-analysis-on-adobe-reader-sing-table-... broken link
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html broken link
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html broken link
http://www.redhat.com/support/errata/RHSA-2010-0743.html broken link
http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt broken link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11586 broken link

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.