CVE-2010-2883

Confirmed PUBLISHED

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote...

Adobe · Reader and Acrobat

Exploited in the wild PoC available

Recommended Action

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.

View KEV Feed Talk to Sales

Confidence

Confirmed

Exploitation Status

Exploited in the wild

Observed in Sensors

Attempts (30d)

—

Unique Attacker IPs

—

CISA KEV

In CISA KEV

CVSS / EPSS

7.3 High

At a Glance

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

windows cisa metasploit macos

CVE Published: Sep 09, 2010
Exploitation Reported: Jun 08, 2022
CVSS: 7.3 High
EPSS: —

Low complexity

Affected Versions

Vendor	Product	Version	Status
n/a	n/a	n/a	Affected

CVE References

SUSE-SA:2010:048 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001...
GLSA-201101-08 security.gentoo.org · Vendor Advisory http://security.gentoo.org/glsa/glsa-201101-08.xml
RHSA-2010:0743 redhat.com · Vendor Advisory http://www.redhat.com/support/errata/RHSA-2010-0743.html
TLSA-2011-2 turbolinux.co.jp · Vendor Advisory http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt
SUSE-SR:2010:019 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006...

Show 14 more references

43025 secunia.com · Third-Party Advisory http://secunia.com/advisories/43025
VU#491991 kb.cert.org · Third-Party Advisory http://www.kb.cert.org/vuls/id/491991
TA10-279A us-cert.gov · Third-Party Advisory http://www.us-cert.gov/cas/techalerts/TA10-279A.html
41340 secunia.com · Third-Party Advisory http://secunia.com/advisories/41340
ADV-2011-0191 vupen.com · VDB Entry http://www.vupen.com/english/advisories/2011/0191
oval:org.mitre.oval:def:11586 oval.cisecurity.org · VDB Entry https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m...
ADV-2011-0344 vupen.com · VDB Entry http://www.vupen.com/english/advisories/2011/0344
ADV-2010-2331 vupen.com · VDB Entry http://www.vupen.com/english/advisories/2010/2331
adobe-reader-cooltype-code-execution(61635) exchange.xforce.ibmcloud.com · VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/61635
43057 securityfocus.com · VDB Entry http://www.securityfocus.com/bid/43057
adobe.com/support/security/advisories/apsa10-02.html adobe.com · CVE Record http://www.adobe.com/support/security/advisories/apsa10-02.html
adobe.com/support/security/bulletins/apsb10-21.html adobe.com · CVE Record http://www.adobe.com/support/security/bulletins/apsb10-21.html
community.websense.com/blogs/securitylabs/archive/2010/09/10/brief-... community.websense.com · CVE Record http://community.websense.com/blogs/securitylabs/archive/2010/09/10/b...
blog.metasploit.com/2010/09/return-of-unpublished-adobe.html blog.metasploit.com · CVE Record http://blog.metasploit.com/2010/09/return-of-unpublished-adobe.html

Recommended Actions

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.
Check enrichment artifacts for scanner coverage and available PoCs before rolling remediation validation.
Use the Pro API to automate enrichment, telemetry, and workflow delivery for VM, SOC, and CTI pipelines.

Known Exploited Vulnerability Sources

Catalogues that list this CVE as a known exploited vulnerability.

Per-source evidence links for KEV attestations are available through the KEVIntel Pro API.

Learn about Pro API access

Source	Added
CISA First	2022-06-08 00:00 UTC

Scanner Artifacts

Nuclei and Metasploit references linked to this CVE.

Scanner	Reference	Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_cooltype_sing.rb	Apr 29, 2025

CVSS Scores

CVSS v3.1 7.3 High

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 9.3 High

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitation Status

Exploited in the wild

Recorded 2022-06-08 00:00:00 UTC · CISA

Proof of concept available

Recorded 2025-04-28 15:02:36 UTC

Weaknesses (CWE)

CWE-787

Out-of-bounds Write

Scanner Integrations

Scanner	Reference	Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_cooltype_sing.rb	Apr 29, 2025

Potential Proof of Concepts

These PoCs are unverified and could contain malware. Use at your own risk.

adobe_cooltype_sing

metasploit · Created Unknown

Metasploit module for CVE-2010-2883

adobe_cooltype_sing

metasploit · Created Unknown

Metasploit module for CVE-2010-2883

Automate This Intelligence with the Pro API

Confidence scoring, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.

View Pro Pricing View API Docs

Pro API Example

GET /api/v2/pro/kevs/CVE-2010-2883

{
  "cve_id": "CVE-2010-2883",
  "title": "Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x b...",
  "affected_vendor": "Adobe",
  "affected_product": "Reader and Acrobat",
  "affected_versions": [
    { "vendor": "...", "product": "...", "status": "affected", "display_label": "..." }
  ],
  "confidence": "Confirmed",
  "cvss_score": 7.3,
  "epss_score": null,
  "exploit_status": {
    "exploited_in_the_wild": true,
    "active_exploitation_observed": false
  },
  "sensor_telemetry": { "...": "Pro API fields" },
  "proof_of_concepts": [ "..." ],
  "scanner_integrations": [ "..." ]
}

The free JSON API returns basic KEV fields only. Confidence, telemetry, and artifact enrichment require Pro API access.

CVE-2010-2883

At a Glance

Affected Versions

CVE References

Recommended Actions

Known Exploited Vulnerability Sources

Scanner Artifacts

Virtual Patch

CVSS Scores

Exploitation Status

Weaknesses (CWE)

Scanner Integrations

Potential Proof of Concepts

Timeline

Automate This Intelligence with the Pro API