Exploit for Adobe Reader CoolType.dll buffer overflow

saint · 2010-09-17

Description

Buffer overflow in Adobe Reader CoolType.dl

Affected Adobe Acrobat versions

Adobe Acrobat< 8.2.5, 9.4

All known vulnerabilities by product

CVSS 9.3 for CVE-2010-2883

9.3

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

82.5%higher than 99.6% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2010-09-17 00:00

Last Seen:2026-02-02 16:08

Reporter:SAINT Corporation

Tags

adobe readerpdfbuffer overflowcooltype.dllcommand executiontruetype fontsecurity advisoryvulnerabilityexploitwindows

Other exploits for CVE-2010-2883

Exploit for Out-of-bounds Write in Adobe Acrobat

2025-09-22 avielzechariaGITHUB

Exploit for Out-of-bounds Write in Adobe Acrobat

2019-12-20 WangGuixiuGITEE

Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow

2014-07-01 RootSEEBUGRuby

Adobe CoolType - SING Table 'uniqueName' Local Stack Buffer Overflow (Metasploit) (2)

2010-09-25 MetasploitEXPLOITDBRuby

Adobe CoolType - SING Table 'uniqueName' Remote Stack Buffer Overflow (Metasploit) (1)

2010-09-20 MetasploitEXPLOITDBRuby

Adobe Reader CoolType.dll buffer overflow

2010-09-17 SAINT CorporationSAINT

Adobe Reader CoolType.dll buffer overflow

2010-09-17 SAINT CorporationSAINT

Adobe Reader CoolType.dll buffer overflow

2010-09-17 SAINT CorporationSAINT

Exploit Code

MARKDOWN33 lines

## https://sploitus.com/exploit?id=SAINT:87E25D27930DA4EC4B02D093DE63B91E
Added: 09/17/2010  
CVE: CVE-2010-2883  
BID: 43057  
OSVDB: 67849  


### Background

Adobe Reader is free software for viewing PDF documents. 

### Problem

A buffer overflow in the CoolType.dll module allows command execution when a user opens a PDF document containing a long, specially crafted field in a SING table within a TrueType font. 

### Resolution

Apply the fix referenced in APSA10-02 when available. 

### References

http://secunia.com/advisories/41340   


### Limitations

Exploit works on Adobe Reader 9.3.4 and requires a user to open the exploit file. 

The IO::Uncompress and Compress::Zlib PERL modules must be installed on the SAINTexploit host in order to run this exploit. 

### Platforms

Windows