CVE-2010-2206

Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.

Score

CVSS 2.0 9.3 Critical

Status

Modified - psirt@adobe.com

Published

2010-06-30

Last modified

2024-08-07

Weaknesses

CWE-189

Affected products

• Acrobat (Adobe)
• Acrobat Reader (Adobe)

References

• http://secunia.com/secunia_research/2010-88/
• http://www.adobe.com/support/security/bulletins/apsb10-15.html
• http://www.securityfocus.com/archive/1/512092/100/0/threaded
• http://www.securityfocus.com/bid/41241
• http://www.securitytracker.com/id?1024159
• http://www.vupen.com/english/advisories/2010/1636
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200