CVE-2010-0195

Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute…

published April 14, 2010

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky flaw in Adobe Reader could let attackers take control through faulty font handling — like letting a stranger into your house because you trusted the wrong delivery! 📦 Think of your PDF reader like a restaurant that lets unauthorized chefs in, all because it didn’t check who had access to the kitchen. If a rogue chef slips in some bad ingredients (or code), they could whip up a disastrous surprise for your guests! If exploited, this vulnerability could allow attackers to execute arbitrary code on your system, potentially leading to data theft or system compromise. Although there are no known exploitations currently, the risk remains that a crafty hacker could launch an attack at any moment, making this a sneaky threat worth addressing!

Put simply

Think of your PDF reader like a restaurant that lets unauthorized chefs in, all because it didn’t check who had access to the kitchen. If a rogue chef slips in some bad ingredients (or code), they could whip up a disastrous surprise for your guests! The vulnerability arises from Adobe Reader and Acrobat versions 9.x prior to 9.3.2 and 8.x prior to 8.2.2 failing to properly handle fonts, allowing for arbitrary code execution through unspecified vectors.

What to do

If exploited, this vulnerability could allow attackers to execute arbitrary code on your system, potentially leading to data theft or system compromise. Although there are no known exploitations currently, the risk remains that a crafty hacker could launch an attack at any moment, making this a sneaky threat worth addressing! Immediate action is advised: upgrade Adobe Reader and Acrobat to version 9.3.2 or later for 9.x, or 8.2.2 or later for 8.x. Regularly check for updates to keep your software secure! You're on the right track! Patch up your software, and you'll be better protected in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05566 · 92.8th percentile
Published
2010-04-14T15:44Z
EPSS history
Timeline
  • 14 APR 15:44Z
    Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute…
    cvelistv5