Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Reader Apsb10 21 | — | — | Apr 12, 2012 | Sep 9, 2010 |
| Gentoo Linux | — | Upgrade app-text/acroread. | Oct 30, 2017 | Sep 9, 2010 |
| Suse | — | Upgrade acroreadUpgrade acroread_jaUpgrade acroread-fonts-jaUpgrade acroread-fonts-zh_TWUpgrade acroread-fonts-koUpgrade acroread-fonts-zh_CNUpgrade acroread-cmaps | Feb 17, 2015 | Sep 9, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub