CVE-2010-2206: Adobe Acrobat

High severity, CVSS 9.3. EPSS: 7% chance of exploitation in the next 30 days.

Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.

Affected products

• Adobe Acrobat: version 9.0 only; version 9.1 only; version 9.1.1 only; version 9.1.2 only; version 9.1.3 only; version 9.2 only; …
• Adobe Acrobat Reader: version 9.0 only; version 9.1 only; version 9.1.1 only; version 9.1.2 only; version 9.1.3 only; version 9.2 only; …

Published 2010-06-30. Last modified 2026-06-16.