CVEvulnerability

CVE-2010-2206

9.3 HIGH Published 2010-06-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-06-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-189

Description

Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.

Affected configurations

• adobe acrobat 9.0 • adobe acrobat 9.1 • adobe acrobat 9.1.1 • adobe acrobat 9.1.2 • adobe acrobat 9.1.3 • adobe acrobat 9.2 • adobe acrobat 9.3 • adobe acrobat 9.3.1 • adobe acrobat 9.3.2 • adobe acrobat reader 9.0 • adobe acrobat reader 9.1 • adobe acrobat reader 9.1.1 • adobe acrobat reader 9.1.2 • adobe acrobat reader 9.1.3 • adobe acrobat reader 9.2 • adobe acrobat reader 9.3 • adobe acrobat reader 9.3.1 • adobe acrobat reader 9.3.2 • adobe acrobat 8.0 • adobe acrobat 8.1 • adobe acrobat 8.1.1 • adobe acrobat 8.1.2 • adobe acrobat 8.1.3 • adobe acrobat 8.1.4 • adobe acrobat 8.1.5 • adobe acrobat 8.1.6 • adobe acrobat 8.1.7 • adobe acrobat 8.2 • adobe acrobat 8.2.1 • adobe acrobat 8.2.2 • adobe acrobat reader 8.0 • adobe acrobat reader 8.1 • adobe acrobat reader 8.1.1 • adobe acrobat reader 8.1.2 • adobe acrobat reader 8.1.4 • adobe acrobat reader 8.1.5 • adobe acrobat reader 8.1.6 • adobe acrobat reader 8.1.7 • adobe acrobat reader 8.2.1 • adobe acrobat reader 8.2.2

Related

Weakness · not in database (1)

References