CVE-2010-2889: Input Validation

Published Oct 6, 2010

Updated

Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows attackers to execute arbitrary code via a crafted font, a different vulnerability than CVE-2010-3626.

Affected Software

49 affected components

Adobe Acrobat=8.0

Adobe Acrobat=8.1

Adobe Acrobat=8.1.1

Adobe Acrobat=8.1.2

Adobe Acrobat=8.1.3

Adobe Acrobat=8.1.4

Adobe Acrobat=8.1.5

Adobe Acrobat=8.1.6

Adobe Acrobat=8.1.7

Adobe Acrobat=8.2

Adobe Acrobat=8.2.1

Adobe Acrobat=8.2.2

Adobe Acrobat=8.2.3

Adobe Acrobat=8.2.4

Adobe Acrobat reader=8.0

Adobe Acrobat reader=8.1

Adobe Acrobat reader=8.1.1

Adobe Acrobat reader=8.1.2

Adobe Acrobat reader=8.1.4

Adobe Acrobat reader=8.1.5

Adobe Acrobat reader=8.1.6

Adobe Acrobat reader=8.1.7

Adobe Acrobat reader=8.2

Adobe Acrobat reader=8.2.1

Adobe Acrobat reader=8.2.2

Adobe Acrobat reader=8.2.3

Adobe Acrobat reader=8.2.4

Adobe Acrobat=9.0

Adobe Acrobat=9.1

Adobe Acrobat=9.1.1

Adobe Acrobat=9.1.2

Adobe Acrobat=9.1.3

Adobe Acrobat=9.2

Adobe Acrobat=9.3

Adobe Acrobat=9.3.1

Adobe Acrobat=9.3.2

Adobe Acrobat=9.3.3

Adobe Acrobat=9.3.4

Adobe Acrobat reader=9.0

Adobe Acrobat reader=9.1

Adobe Acrobat reader=9.1.1

Adobe Acrobat reader=9.1.2

Adobe Acrobat reader=9.1.3

Adobe Acrobat reader=9.2

Adobe Acrobat reader=9.3

Adobe Acrobat reader=9.3.1

Adobe Acrobat reader=9.3.2

Adobe Acrobat reader=9.3.3

Adobe Acrobat reader=9.3.4

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb10-21.html

Event History

Oct 6, 2010

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2889?

CVE-2010-2889 is classified as a critical vulnerability because it allows attackers to execute arbitrary code.

How do I fix CVE-2010-2889?

To fix CVE-2010-2889, update Adobe Reader and Acrobat to version 9.4 or later for 9.x, and version 8.2.5 or later for 8.x.

What software is affected by CVE-2010-2889?

CVE-2010-2889 affects Adobe Reader and Acrobat versions 8.x before 8.2.5 and 9.x before 9.4.

What is the impact of CVE-2010-2889?

The impact of CVE-2010-2889 is significant, as it can lead to a complete system compromise if exploited.

Is CVE-2010-2889 actively exploited?

There have been reports of CVE-2010-2889 being actively exploited in the wild, particularly through crafted fonts.