CVE-2010-0188KEV · OVERDUE

Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

High · published February 22, 2010

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.

1674
days past CISA
deadline
CVSS v3.1
7.8
EPSS
88%
Percentile
99.8
In the wild
Confirmed
What it is

🚨 An unspecified vulnerability lurking in Adobe Reader and Acrobat has been spotted, and it’s a real party crasher! ⚡ Think of this vulnerability as a rogue guest at a fancy gala who suddenly trips the power and plunges the entire event into darkness – leaving everyone in chaos. It can cause your application to crash or even let an attacker take control like a partygoer swiping the mic from the DJ. With this bug, an attacker could either make your Adobe Reader or Acrobat crash unexpectedly or, in a more sinister twist, execute arbitrary code. Imagine losing access to crucial documents right when you need them, or worse, having your system compromised – the fallout could be absolutely devastating!

Put simply

Think of this vulnerability as a rogue guest at a fancy gala who suddenly trips the power and plunges the entire event into darkness – leaving everyone in chaos. It can cause your application to crash or even let an attacker take control like a partygoer swiping the mic from the DJ. This vulnerability allows attackers to trigger a denial of service or potentially execute arbitrary code through unknown vectors in Adobe Reader and Acrobat versions 8.x before 8.2.1 and 9.x before 9.3.1, meaning it doesn't take much for bad actors to wreak havoc.

What to do

With this bug, an attacker could either make your Adobe Reader or Acrobat crash unexpectedly or, in a more sinister twist, execute arbitrary code. Imagine losing access to crucial documents right when you need them, or worse, having your system compromised – the fallout could be absolutely devastating! To protect yourself, make sure to update Adobe Reader and Acrobat to the latest versions: upgrade to 8.2.1 or 9.3.1 at a minimum. Regularly check for updates to stay ahead of any security threats and ensure your software is fully patched. 🛡️ You've got this! Stay vigilant, keep your applications updated, and you’ll be a security hero! 🦸‍♂️🦸‍♀️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.88246 · 99.8th percentile
Published
2010-02-22T18:00Z
KEV added
2022-03-03 · due 2022-03-24
Affected products (4)
ProductVersionsFixed in
adobe/acrobat≥ 8.0, < 8.2.18.2.1
adobe/acrobat≥ 9.0, < 9.3.19.3.1
adobe/acrobat_reader≥ 8.0, < 8.2.18.2.1
adobe/acrobat_reader≥ 9.0, < 9.3.19.3.1
References (21)
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html · [email protected]http://secunia.com/advisories/38639 · [email protected]http://secunia.com/advisories/38915 · [email protected]http://securitytracker.com/id?1023601 · [email protected]http://www.adobe.com/support/security/bulletins/apsb10-07.html · [email protected]http://www.redhat.com/support/errata/RHSA-2010-0114.html · [email protected]http://www.securityfocus.com/bid/38195 · [email protected]http://www.vupen.com/english/advisories/2010/0399 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/56297 · [email protected]https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8697 · [email protected]http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/38639 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/38915 · af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1023601 · af854a3a-2127-422b-91ae-364da2661108http://www.adobe.com/support/security/bulletins/apsb10-07.html · af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2010-0114.html · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/38195 · af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2010/0399 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/56297 · af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8697 · af854a3a-2127-422b-91ae-364da2661108https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0188 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 03 MAR 00:00Z
    Added to CISA KEV — remediate by Mar 24
    kev
  • 21 FEB 17:00Z
    Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash)…
    cvelistv5