PT-2010-1173 · Adobe · Reader

Jared Allar · Published 2010-09-09 · Updated 2026-02-23 · CVE-2010-2883

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 8.x through 8.2.5 Adobe Reader versions 9.x through 9.3

Description The issue is related to a stack-based buffer overflow in CoolType.dll, allowing remote attackers to execute arbitrary code or cause a denial of service via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font. This issue has been exploited in the wild.

Recommendations For Adobe Reader versions 8.x through 8.2.5, update to version 8.2.5 or later to resolve the issue. For Adobe Reader versions 9.x through 9.3, update to version 9.4 or later to resolve the issue. As a temporary workaround, consider avoiding the use of PDF documents with long fields in SING tables in TTF fonts until the issue is resolved.

Exploit

Fix

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2022-03556

CVE-2010-2883

RHSA-2010:0743

Affected Products

Reader

References · 32

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_cooltype_sing.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_cooltype_sing.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16619 · Exploit
• 🔥 https://exploit-db.com/exploits/16494 · Exploit
• http://secunia.com/advisories/43025 · Vendor Advisory
• http://adobe.com/support/security/advisories/apsa10-02.html · Vendor Advisory
• http://vupen.com/english/advisories/2010/2331 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0344 · Vendor Advisory
• http://turbolinux.co.jp/security/2011/TLSA-2011-2j.txt · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0743.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201101-08.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2883 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html · Vendor Advisory
• http://secunia.com/advisories/41340 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html · Vendor Advisory