CVE-2010-2889

high · 9.3

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-3626.

9.3

CVSS

27.2%

EPSS (exploit prob.)

98th

EPSS percentile

2010-10-06

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
adobe	acrobat	8.0
adobe	acrobat	8.1
adobe	acrobat	8.1.1
adobe	acrobat	8.1.2
adobe	acrobat	8.1.3
adobe	acrobat	8.1.4
adobe	acrobat	8.1.5
adobe	acrobat	8.1.6
adobe	acrobat	8.1.7
adobe	acrobat	8.2
adobe	acrobat	8.2.1
adobe	acrobat	8.2.2
adobe	acrobat	8.2.3
adobe	acrobat	8.2.4
adobe	acrobat_reader	8.0
adobe	acrobat_reader	8.1
adobe	acrobat_reader	8.1.1
adobe	acrobat_reader	8.1.2
adobe	acrobat_reader	8.1.4
adobe	acrobat_reader	8.1.5
adobe	acrobat_reader	8.1.6
adobe	acrobat_reader	8.1.7
adobe	acrobat_reader	8.2
adobe	acrobat_reader	8.2.1
adobe	acrobat_reader	8.2.2
adobe	acrobat_reader	8.2.3
adobe	acrobat_reader	8.2.4
adobe	acrobat	9.0
adobe	acrobat	9.1
adobe	acrobat	9.1.1
adobe	acrobat	9.1.2
adobe	acrobat	9.1.3
adobe	acrobat	9.2
adobe	acrobat	9.3
adobe	acrobat	9.3.1
adobe	acrobat	9.3.2
adobe	acrobat	9.3.3
adobe	acrobat	9.3.4
adobe	acrobat_reader	9.0
adobe	acrobat_reader	9.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-2889