CVE-2010-4091 The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denia...
HighCVSS 9.3
EPSS 18.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 8.0 | No fix listed |
| Adobe Acrobat Reader | = 8.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.1 | No fix listed |
| Adobe Acrobat Reader | = 8.1.2 | No fix listed |
| Adobe Acrobat Reader | = 8.1.4 | No fix listed |
| Adobe Acrobat Reader | = 8.1.5 | No fix listed |
| Adobe Acrobat Reader | = 8.1.6 | No fix listed |
| Adobe Acrobat Reader | = 8.1.7 | No fix listed |
| Adobe Acrobat Reader | = 8.2 | No fix listed |
| Adobe Acrobat Reader | = 8.2.1 | No fix listed |
| Adobe Acrobat Reader | = 8.2.2 | No fix listed |
| Adobe Acrobat Reader | = 8.2.3 | No fix listed |
| Adobe Acrobat Reader | = 8.2.4 | No fix listed |
| Adobe Acrobat Reader | = 9.0 | No fix listed |
| Adobe Acrobat Reader | = 9.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.1 | No fix listed |
| Adobe Acrobat Reader | = 9.1.2 | No fix listed |
| Adobe Acrobat Reader | = 9.1.3 | No fix listed |
| Adobe Acrobat Reader | = 9.2 | No fix listed |
| Adobe Acrobat Reader | = 9.3 | No fix listed |
| Adobe Acrobat Reader | = 9.3.1 | No fix listed |
| Adobe Acrobat Reader | = 9.3.2 | No fix listed |
| Adobe Acrobat Reader | = 9.3.3 | No fix listed |
| Adobe Acrobat Reader | = 9.3.4 | No fix listed |
| Adobe Acrobat Reader | = 9.4 | No fix listed |
Show 28 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe Acrobat Reader | = 10.0 | No fix listed |
| Adobe acrobat | = 8.0 | No fix listed |
| Adobe acrobat | = 8.1 | No fix listed |
| Adobe acrobat | = 8.1.1 | No fix listed |
| Adobe acrobat | = 8.1.2 | No fix listed |
| Adobe acrobat | = 8.1.3 | No fix listed |
| Adobe acrobat | = 8.1.4 | No fix listed |
| Adobe acrobat | = 8.1.5 | No fix listed |
| Adobe acrobat | = 8.1.6 | No fix listed |
| Adobe acrobat | = 8.1.7 | No fix listed |
| Adobe acrobat | = 8.2 | No fix listed |
| Adobe acrobat | = 8.2.1 | No fix listed |
| Adobe acrobat | = 8.2.2 | No fix listed |
| Adobe acrobat | = 8.2.3 | No fix listed |
| Adobe acrobat | = 8.2.4 | No fix listed |
| Adobe acrobat | = 9.0 | No fix listed |
| Adobe acrobat | = 9.1 | No fix listed |
| Adobe acrobat | = 9.1.1 | No fix listed |
| Adobe acrobat | = 9.1.2 | No fix listed |
| Adobe acrobat | = 9.1.3 | No fix listed |
| Adobe acrobat | = 9.2 | No fix listed |
| Adobe acrobat | = 9.3 | No fix listed |
| Adobe acrobat | = 9.3.1 | No fix listed |
| Adobe acrobat | = 9.3.2 | No fix listed |
| Adobe acrobat | = 9.3.3 | No fix listed |
| Adobe acrobat | = 9.3.4 | No fix listed |
| Adobe acrobat | = 9.4 | No fix listed |
| Adobe acrobat | = 10.0 | No fix listed |
References
- 20101103 [0dayz] Acrobat Reader Memory Corruption Remote Arbitrary Code Execution exploit mailing-list
- blogs.adobe.com
- extraexploit.blogspot.com
- SUSE-SA:2010:058 vendor-advisory
- 69005 vdb-entry
- 42095 third-party-advisory vendor-advisory
- 42401 third-party-advisory vendor-advisory
- 43025 third-party-advisory vendor-advisory
- GLSA-201101-08 vendor-advisory
- www.adobe.com patch vendor-advisory
- www.adobe.com
- 15419 exploit
- RHSA-2010:0934 vendor-advisory
- 44638 vdb-entry
- 1024684 vdb-entry
- 1025033 vdb-entry
- ADV-2010-2890 vdb-entry vendor-advisory
- ADV-2010-3111 vdb-entry vendor-advisory
- ADV-2011-0191 vdb-entry vendor-advisory
- ADV-2011-0337 vdb-entry vendor-advisory
- adobe-reader-pdf-file-ce(62996) vdb-entry
- oval:org.mitre.oval:def:12527 signature vdb-entry