{"id":"CVE-2010-0195","aliases":["EUVD-2010-0226","GHSA-p4m7-9364-7j9j","RHSA-2010:0349"],"status":"published","title":"Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not...","description":"Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.05566,"percentile":0.92913,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2010-04-14T15:44:00Z","modified":"2026-06-29T10:03:18Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el4"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.2-1.el5"}]}],"bundled":15}],"products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat_reader"}],"references":[{"url":"http://www.vupen.com/english/advisories/2010/0873","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-103C.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/39329","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-09.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0195","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p4m7-9364-7j9j"},{"url":"https://access.redhat.com/errata/RHSA-2010:0349","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=579213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=581417","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0349.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0190","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0190","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0191","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0191","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0191","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0192","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0192","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0193","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0194","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0194","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0194","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0195","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0195","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0196","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0196","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0196","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0197","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0197","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0198","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0199","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0199","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0199","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0201","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0202","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0202","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0202","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0203","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-0204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0204","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1241","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1241","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-0195","description":"Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2010-04-14T15:44:00Z","modified":"2024-08-07T00:37:54.023Z","updated_at":"2026-11-02T14:33:29.990758Z"}],"euvd":[{"id":"EUVD-2010-0226","description":"Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2010-04-14T15:44:00Z","modified":"2024-08-07T00:37:54Z","updated_at":"2026-11-03T01:39:46.213752Z"}],"ghsa":[{"id":"GHSA-p4m7-9364-7j9j","title":"Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not...","description":"Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2022-05-02T06:10:51Z","modified":"2023-02-01T05:00:29Z","cwes":["CWE-94"],"updated_at":"2026-11-02T14:49:32.85027Z"}],"nvd":[{"id":"CVE-2010-0195","description":"Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2010-04-14T16:00:00.82Z","modified":"2026-06-16T23:15:41.337Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:01:45.97784Z"}],"osv":[{"id":"RHSA-2010:0349","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T06:47:01Z","modified":"2026-06-29T10:03:18Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}