Exploitation Summary
CVE-2010-2883 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 8, 2022.
EIP tracks 6 public exploits from researchers including Metasploit, avielzecharia, AmazingOut, including a Metasploit module exploits/windows/browser/adobe_cooltype_sing.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Adobe Reader's CoolType SING table handling (CVE-2010-2883) via a maliciously crafted PDF file. It uses ROP chains and heap spraying to bypass DEP and ASLR, achieving remote code execution.
Description
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.
Exploits (6)
This Metasploit module exploits a stack buffer overflow in Adobe Reader's CoolType SING table handling (CVE-2010-2883) via a maliciously crafted PDF file. It uses ROP chains and heap spraying to bypass DEP and ASLR, achieving remote code execution.
This Metasploit module exploits a stack buffer overflow in Adobe Reader's CoolType SING table handling (CVE-2010-2883) via a crafted PDF with embedded TTF font. It uses ROP chains and heap spraying to bypass DEP/ASLR and achieve remote code execution.
This repository contains a functional Metasploit module exploiting CVE-2010-2883, a stack buffer overflow in Adobe Reader's CoolType SING table handling. The exploit uses ROP chains, heap spraying, and DEP bypass techniques to achieve remote code execution.
The repository contains only a minimal README with a table listing CVE-2010-2883 details but no actual exploit code or technical analysis. It references Metasploit but provides no functional PoC or technical depth.
This Metasploit module exploits a stack buffer overflow in Adobe CoolType's SING table handling (CVE-2010-2883) via a crafted PDF with embedded TTF font. It uses ROP chains, heap spraying, and ret2lib to bypass DEP/ASLR and achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in Adobe Reader's CoolType SING table handling (CVE-2010-2883) via a crafted PDF with embedded TTF font and JavaScript heap spray to achieve remote code execution.
References (20)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H