CVE-2010-2206: Buffer Overflow
Published Jun 30, 2010
·Updated
Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.
Affected Software
42 affected components
Adobe Acrobat=9.0
Adobe Acrobat=9.1
Adobe Acrobat=9.1.1
Adobe Acrobat=9.1.2
Adobe Acrobat=9.1.3
Adobe Acrobat=9.2
Adobe Acrobat=9.3
Adobe Acrobat=9.3.1
Adobe Acrobat=9.3.2
Apple iOS and macOS
Microsoft Windows
Adobe Acrobat Reader=9.0
Adobe Acrobat Reader=9.1
Adobe Acrobat Reader=9.1.1
Adobe Acrobat Reader=9.1.2
Adobe Acrobat Reader=9.1.3
Adobe Acrobat Reader=9.2
Adobe Acrobat Reader=9.3
Adobe Acrobat Reader=9.3.1
Adobe Acrobat Reader=9.3.2
Adobe Acrobat=8.0
Adobe Acrobat=8.1
Adobe Acrobat=8.1.1
Adobe Acrobat=8.1.2
Adobe Acrobat=8.1.3
Adobe Acrobat=8.1.4
Adobe Acrobat=8.1.5
Adobe Acrobat=8.1.6
Adobe Acrobat=8.1.7
Adobe Acrobat=8.2
Adobe Acrobat=8.2.1
Adobe Acrobat=8.2.2
Adobe Acrobat Reader=8.0
Adobe Acrobat Reader=8.1
Adobe Acrobat Reader=8.1.1
Adobe Acrobat Reader=8.1.2
Adobe Acrobat Reader=8.1.4
Adobe Acrobat Reader=8.1.5
Adobe Acrobat Reader=8.1.6
Adobe Acrobat Reader=8.1.7
Adobe Acrobat Reader=8.2.1
Adobe Acrobat Reader=8.2.2
Remediation
Event History
Jun 30, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-2206?
The severity of CVE-2010-2206 is considered critical due to its potential for remote code execution.
2
How do I fix CVE-2010-2206?
To fix CVE-2010-2206, update Adobe Reader and Acrobat to version 9.3.3 or later, or 8.2.3 or later.
3
What type of vulnerability is CVE-2010-2206?
CVE-2010-2206 is a heap-based buffer overflow vulnerability.
4
Which applications are affected by CVE-2010-2206?
CVE-2010-2206 affects Adobe Reader and Acrobat version 9.x before 9.3.3 and 8.x before 8.2.3.
5
Can CVE-2010-2206 be exploited remotely?
Yes, CVE-2010-2206 can be exploited remotely through a specially crafted GIF image embedded in a PDF.