9.3

CVE-2010-2206

Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Acrobat Version9.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version9.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version9.1.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version9.1.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version9.1.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version9.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version9.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version9.3.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version9.3.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version9.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version9.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version9.1.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version9.1.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version9.1.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version9.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version9.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version9.3.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version9.3.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.1.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.1.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.1.3
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.1.4
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.1.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.1.6
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.1.7
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.2.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Version8.2.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version8.0
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version8.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version8.1.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version8.1.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version8.1.4
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version8.1.5
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version8.1.6
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version8.1.7
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version8.2.1
   Apple ≫ macOS X
   Microsoft ≫ Windows
Adobe ≫ Acrobat Reader Version8.2.2
   Apple ≫ macOS X
   Microsoft ≫ Windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.99% 0.933
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.adobe.com/support/security/bulletins/apsb10-15.html
Patch
Vendor Advisory
http://www.securitytracker.com/id?1024159
http://www.vupen.com/english/advisories/2010/1636
http://secunia.com/secunia_research/2010-88/
http://www.securityfocus.com/archive/1/512092/100/0/threaded
http://www.securityfocus.com/bid/41241
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200