CVE-2010-2862: Adobe Acrobat

High severity, CVSS 9.3. EPSS: 16.3% chance of exploitation in the next 30 days.

Integer overflow in CoolType.dll in Adobe Reader 8.2.3 and 9.3.3, and Acrobat 9.3.3, allows remote attackers to execute arbitrary code via a TrueType font with a large maxCompositePoints value in a Maximum Profile (maxp) table.

Affected products

• Adobe Acrobat: version 9.3.3 only
• Adobe Acrobat Reader: version 8.2.3 only; version 9.3.3 only

Published 2010-08-05. Last modified 2026-06-16.