VULNERABILITY INTELLIGENCE

CVE-2010-2206

CVSS score9.3 HIGH
EPSS probability6.99%
CISA KEVNot currently listed
Published2010-06-30
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.

Primary references