CVE-2010-0188: Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

High severity · published Feb 21, 2010

CVE-2010-0188

Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

RansomwareIn wildKEV

7.8

CVSS

88.2%

EPSS

Yes

On KEV

Description

Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)88.2% · higher than 100% of CVEs

Exploited in the wildYes

CISA KEVListed Mar 3, 2022

Federal remediation dueMar 24, 2022

Ransomware campaign useKnown

Affected products

Which versions

Acrobat · Adobe

8.0 before 8.2.1; 9.0 before 9.3.1 · source: NVD

Acrobat Reader · Adobe

8.0 before 8.2.1; 9.0 before 9.3.1 · source: NVD

Reader and Acrobat · Adobe

All versions, or not specified · source: KEV

Affected product

Acrobat

Adobe

All Acrobat CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2010-0188

CVE.org

https://www.cve.org/CVERecord?id=CVE-2010-0188

CISA KEV catalogue

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

vdb-entry

http://www.vupen.com/english/advisories/2010/0399

vdb-entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/56297

vendor-advisory

http://www.redhat.com/support/errata/RHSA-2010-0114.html

vendor-advisory

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

vdb-entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8697

x_refsource_CONFIRM

http://www.adobe.com/support/security/bulletins/apsb10-07.html