NVD

Id
15399  
Name
CVE-2010-4091  
Description
The EScript.api plugin in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.1, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document that triggers memory corruption, involving the printSeps function. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-11-07  
Modified Date
2011-07-25  
Seq
2010-4091  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86856 15399 CVE-2010-4091 20101103 [0dayz] Acrobat Reader Memory Corruption Remote Arbitrary Code Execution  View
86857 15399 CVE-2010-4091 http://blogs.adobe.com/psirt/2010/11/potential-issue-in-adobe-reader.html  View
86858 15399 CVE-2010-4091 http://extraexploit.blogspot.com/2010/11/full-disclosure-xplpdf-adober-reader-94.html  View
86859 15399 CVE-2010-4091 SUSE-SA:2010:058  View
86860 15399 CVE-2010-4091 oval:org.mitre.oval:def:12527  View
86861 15399 CVE-2010-4091 GLSA-201101-08  View
86862 15399 CVE-2010-4091 http://www.adobe.com/support/security/bulletins/apsb10-28.html  View
86863 15399 CVE-2010-4091 http://www.adobe.com/support/security/bulletins/apsb11-03.html  View
86864 15399 CVE-2010-4091 15419  View
86865 15399 CVE-2010-4091 RHSA-2010:0934  View
86866 15399 CVE-2010-4091 44638  View
86867 15399 CVE-2010-4091 1024684  View
86868 15399 CVE-2010-4091 1025033  View
86869 15399 CVE-2010-4091 ADV-2010-2890  View
86870 15399 CVE-2010-4091 ADV-2010-3111  View
86871 15399 CVE-2010-4091 ADV-2011-0191  View
86872 15399 CVE-2010-4091 ADV-2011-0337  View
86873 15399 CVE-2010-4091 adobe-reader-pdf-file-ce(62996)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36690 JVNDB-2010-002470 Adobe Reader および Acrobat の EScript.api プラグインにおける任意のコードを実行される脆弱性 Adobe Reader および Acrobat の EScript.api プラグインには、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-4091 46671 CVE-2010-4091 15399 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002470.html 2010-11-07 2011-02-23 View