Description
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Adobe / acrobat8.0 – 8.2.1
- Adobe / Acrobat Reader8.0 – 8.2.1
Exploits & proofs of concept
- exploit-dbApple iOS Mobile Safari - LibTIFF Buffer Overflow (Metasploit)by Metasploit
- exploit-dbApple iOS Mobile Mail - LibTIFF Buffer Overflow (Metasploit)by Metasploit
- exploit-dbAdobe Acrobat - Bundled LibTIFF Integer Overflow (Metasploit)by Metasploit
- exploit-dbAdobe Reader PDF - LibTiff Integer Overflow Code Executionby villy
References
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2010/0399
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/56297
- MISChttp://www.redhat.com/support/errata/RHSA-2010-0114.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8697
- VENDOR_ADVISORYhttp://www.adobe.com/support/security/bulletins/apsb10-07.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/38639
- MISChttp://www.securityfocus.com/bid/38195
- MISChttp://securitytracker.com/id?1023601
- VENDOR_ADVISORYhttp://secunia.com/advisories/38915
Updated 7m ago · 8 sources