Oval Definition:	oval:org.mitre.oval:def:11586
Revision Date: 2014-10-06 Version: 23 Title: Adobe Reader and Acrobat CoolType.dll Font Parsing Buffer Overflow Vulnerability Description: Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information. Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2010-2883 Platform(s): Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Adobe Acrobat Adobe Reader Definition Synopsis Adobe Reader 8 Adobe Reader 8 Series is installed AND Adobe Reader 8, the sub-version is vulnerable Adobe Reader is less than or equal 8.2.4 OR Adobe Reader library is less than or equal 8.2.4 OR Adobe Reader 9 Adobe Reader 9 Series is installed AND Adobe Reader 9, the sub-version is vulnerable Adobe Reader is less than or equal 9.3.4 OR Adobe Reader library is less than or equal 9.3.4 OR Adobe Acrobat 9 Adobe Acrobat 9 Series is installed AND Adobe Acrobat 9, the sub-version is vulnerable Adobe Acrobat is less than or equal 9.3.4 OR Adobe Acrobat library is less than or equal 9.3.4 OR Adobe Acrobat 8 Adobe Acrobat 8 Series is installed AND Adobe Acrobat 8, the sub-version is vulnerable Adobe Acrobat is less than or equal 8.2.4 OR Adobe Acrobat library is less than or equal 8.2.4
BACK