CVE-2010-0188
HIGH KEV RANSOMWAREAdobe Acrobat and Reader 8.x < 8.2.1 and 9.x < 9.3.1 - Remote Code Execution
Title source: llmExploitation Summary
CVE-2010-0188 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 3, 2022, with confirmed use in ransomware campaigns.
EIP tracks 5 public exploits from researchers including Metasploit, villy, Microsoft, including a Metasploit module exploits/windows/fileformat/adobe_libtiff.
AI-analyzed exploit summary This exploit targets a buffer overflow in libtiff on Apple iOS MobileSafari (firmware versions 1.00, 1.01, 1.02, 1.1.1) by crafting a malicious TIFF file. It leverages heap manipulation and shellcode injection to achieve remote code execution.
Description
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
Exploits (5)
This exploit targets a buffer overflow in libtiff on Apple iOS MobileSafari (firmware versions 1.00, 1.01, 1.02, 1.1.1) by crafting a malicious TIFF file. It leverages heap manipulation and shellcode injection to achieve remote code execution.
This exploit targets a buffer overflow in libtiff on Apple iOS MobileMail (firmware versions 1.00, 1.01, 1.02, 1.1.1) via a maliciously crafted TIFF file sent as an email attachment. It leverages heap manipulation and shellcode execution to achieve remote code execution.
This exploit targets an integer overflow vulnerability in Adobe Reader and Acrobat (CVE-2010-0188) by crafting a malicious PDF file with embedded TIFF data. It leverages a DEP bypass via ret2lib using BIB.dll to execute arbitrary shellcode.
This exploit generates a malicious PDF file targeting CVE-2010-0188 (Adobe Acrobat Reader LibTiff Integer Overflow). It embeds a crafted TIFF image with shellcode to achieve remote code execution (calc.exe) when the PDF is opened.
This Metasploit module exploits an integer overflow vulnerability in Adobe Reader and Acrobat (CVE-2010-0188) by crafting a malicious PDF file with embedded TIFF data. It bypasses DEP using a ret2lib technique targeting BIB.dll to achieve remote code execution.
References (11)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H