CVEvulnerability
CVE-2010-2206
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.
Affected configurations
• adobe acrobat 9.0
• adobe acrobat 9.1
• adobe acrobat 9.1.1
• adobe acrobat 9.1.2
• adobe acrobat 9.1.3
• adobe acrobat 9.2
• adobe acrobat 9.3
• adobe acrobat 9.3.1
• adobe acrobat 9.3.2
• adobe acrobat reader 9.0
• adobe acrobat reader 9.1
• adobe acrobat reader 9.1.1
• adobe acrobat reader 9.1.2
• adobe acrobat reader 9.1.3
• adobe acrobat reader 9.2
• adobe acrobat reader 9.3
• adobe acrobat reader 9.3.1
• adobe acrobat reader 9.3.2
• adobe acrobat 8.0
• adobe acrobat 8.1
• adobe acrobat 8.1.1
• adobe acrobat 8.1.2
• adobe acrobat 8.1.3
• adobe acrobat 8.1.4
• adobe acrobat 8.1.5
• adobe acrobat 8.1.6
• adobe acrobat 8.1.7
• adobe acrobat 8.2
• adobe acrobat 8.2.1
• adobe acrobat 8.2.2
• adobe acrobat reader 8.0
• adobe acrobat reader 8.1
• adobe acrobat reader 8.1.1
• adobe acrobat reader 8.1.2
• adobe acrobat reader 8.1.4
• adobe acrobat reader 8.1.5
• adobe acrobat reader 8.1.6
• adobe acrobat reader 8.1.7
• adobe acrobat reader 8.2.1
• adobe acrobat reader 8.2.2
Related
Weakness · not in database (1)
References
- http://secunia.com/secunia_research/2010-88/ secunia.com
- http://www.adobe.com/support/security/bulletins/apsb10-15.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/512092/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/41241 www.securityfocus.com
- http://www.securitytracker.com/id?1024159 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/1636 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200 oval.cisecurity.org
- http://secunia.com/secunia_research/2010-88/ secunia.com
- http://www.adobe.com/support/security/bulletins/apsb10-15.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/512092/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/41241 www.securityfocus.com
- http://www.securitytracker.com/id?1024159 www.securitytracker.com
- http://www.vupen.com/english/advisories/2010/1636 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200 oval.cisecurity.org