Description
Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Metrics
CVSS 2.0 4.3/10
AV:N/AC:M/Au:N/C:N/I:P/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://www.adobe.com/support/security/bulletins/apsb10-09.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/39329
- http://www.us-cert.gov/cas/techalerts/TA10-103C.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2010/0873Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6986
- http://www.adobe.com/support/security/bulletins/apsb10-09.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/39329
- http://www.us-cert.gov/cas/techalerts/TA10-103C.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2010/0873Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6986
Timeline
- Published
- Apr 14, 2010
- Last modified
- Jun 16, 2026
- NVD status
- Modified