CVE-2010-0198

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via…

published April 14, 2010

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow in Adobe Reader and Acrobat could let attackers run arbitrary code on your system! 🚨 Think of this vulnerability like a poorly packed suitcase that bursts open at the airport, spilling all your belongings everywhere. In this case, an attacker can ‘stuff’ too much data into the application and potentially hijack it! If exploited, an attacker could take control of your system, allowing them to execute malicious code. This means they could access your files, install malware, or cause other chaos on your machine — absolutely devastating!

Put simply

Think of this vulnerability like a poorly packed suitcase that bursts open at the airport, spilling all your belongings everywhere. In this case, an attacker can ‘stuff’ too much data into the application and potentially hijack it! This buffer overflow occurs in Adobe Reader and Acrobat versions 9.x before 9.3.2 and 8.x before 8.2.2 on both Windows and Mac OS X. Attackers can exploit it through unspecified vectors, leading to arbitrary code execution.

What to do

If exploited, an attacker could take control of your system, allowing them to execute malicious code. This means they could access your files, install malware, or cause other chaos on your machine — absolutely devastating! To protect yourself, update Adobe Reader and Acrobat to at least version 9.3.2 for 9.x and 8.2.2 for 8.x. Regularly check for updates to ensure you’re running the latest and most secure version. 🛡️ You've got this! Follow these steps to bolster your defenses and keep your system safe! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08118 · 94.8th percentile
Published
2010-04-14T15:44Z
EPSS history
Timeline
  • 14 APR 15:44Z
    Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via…
    cvelistv5