CVE

Id
44790  
CVE No.
CVE-2010-2206  
Status
Candidate  
Description
Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.  
Phase
Assigned (20100608)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
489189 44790 CVE-2010-2206 BUGTRAQ:20100630 Secunia Research: Adobe Reader GIF Image Parsing Array-Indexing Vulnerability  View
489190 44790 CVE-2010-2206 URL:http://www.securityfocus.com/archive/1/archive/1/512092/100/0/threaded  View
489191 44790 CVE-2010-2206 MISC:http://secunia.com/secunia_research/2010-88/  View
489192 44790 CVE-2010-2206 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb10-15.html  View
489193 44790 CVE-2010-2206 BID:41241  View
489194 44790 CVE-2010-2206 URL:http://www.securityfocus.com/bid/41241  View
489195 44790 CVE-2010-2206 OVAL:oval:org.mitre.oval:def:7200  View
489196 44790 CVE-2010-2206 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7200  View
489197 44790 CVE-2010-2206 SECTRACK:1024159  View
489198 44790 CVE-2010-2206 URL:http://www.securitytracker.com/id?1024159  View
489199 44790 CVE-2010-2206 VUPEN:ADV-2010-1636  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35936 JVNDB-2010-001716 Adobe Reader および Acrobat における任意のコードを実行される脆弱性 Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-2210 44790 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001716.html  View