{"id":"CVE-2010-2206","aliases":["EUVD-2010-2222","GHSA-jf6r-2jh6-5f5q","RHSA-2010:0503"],"status":"published","title":"Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8...","description":"Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06994,"percentile":0.94199,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-189"],"published":"2010-06-30T18:00:00Z","modified":"2026-06-29T10:03:26Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.3-2.el4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.3-2.el4"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.3-1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.3-1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.3-1.el5"}]}],"bundled":17},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3.3-1.el5"}]}],"bundled":17}],"products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat_reader"}],"references":[{"url":"http://www.vupen.com/english/advisories/2010/1636","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-15.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","article"]},{"url":"http://www.securityfocus.com/archive/1/512092/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/secunia_research/2010-88/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.securitytracker.com/id?1024159","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/41241","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2206","tags":["advisory"]},{"url":"http://secunia.com/secunia_research/2010-88"},{"url":"https://github.com/advisories/GHSA-jf6r-2jh6-5f5q"},{"url":"https://access.redhat.com/errata/RHSA-2010:0503","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.adobe.com/support/security/advisories/apsa10-01.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=600692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=609203","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0503.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1240","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1240","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1240","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1285","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1285","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1285","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1295","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1295","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1295","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1297","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1297","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1297","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2168","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2168","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2168","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2201","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2202","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2202","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2202","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2203","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2204","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2205","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2205","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2205","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2206","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2206","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2207","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2207","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2208","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2208","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2209","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2209","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2210","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2210","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2210","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2211","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2211","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2211","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-2212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2212","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2212","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-2206","description":"Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.","status":"published","published":"2010-06-30T18:00:00Z","modified":"2024-08-07T02:25:07.482Z","updated_at":"2026-11-02T14:33:27.01833Z"}],"euvd":[{"id":"EUVD-2010-2222","description":"Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.","status":"published","published":"2010-06-30T18:00:00Z","modified":"2024-08-07T02:25:07Z","updated_at":"2026-11-03T01:39:38.386309Z"}],"ghsa":[{"id":"GHSA-jf6r-2jh6-5f5q","title":"Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8...","description":"Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.","status":"published","published":"2022-05-14T02:17:56Z","modified":"2025-04-11T03:36:48Z","updated_at":"2026-11-02T15:01:05.853744Z"}],"nvd":[{"id":"CVE-2010-2206","description":"Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.","status":"published","published":"2010-06-30T18:30:01.66Z","modified":"2026-06-16T23:20:17.623Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:01:49.736647Z"}],"osv":[{"id":"RHSA-2010:0503","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T06:01:27Z","modified":"2026-06-29T10:03:26Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}