NetSight
IP …
critical9.3

CVE-2010-2206

Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execut…

Impact

Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.

Affected products

VendorProductAffected versions
AdobeAcrobat
Versions 9.0, 9.1, 9.1.1, 9.1.2, 9.1.3, 9.2
AdobeAcrobat Reader
Versions 9.0, 9.1, 9.1.1, 9.1.2, 9.1.3, 9.2

Weakness classification

CWE-189

References