CVE-2010-2206
Estado: ModificadaAlta (9.3)—
Error de índice de matriz en archivo AcroForm.api en Adobe Reader y Acrobat versión 9.x anterior a 9.3.3 y versión 8.x anterior a 8.2.3 en Windows y Mac OS X, permite a los atacantes remotos ejecutar código arbitrario por medio de una imagen GIF creada en un archivo PDF, lo que omite una comprobación de tamaño y desencadena un desbordamiento de búfer en la región heap de la memoria.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 6.99%
- Percentil entre todas las CVEs puntuadas: 94
- Fecha de la puntuación: 11/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-189
Referencias
- http://secunia.com/secunia_research/2010-88/
- http://www.adobe.com/support/security/bulletins/apsb10-15.html
- http://www.securityfocus.com/archive/1/512092/100/0/threaded
- http://www.securityfocus.com/bid/41241
- http://www.securitytracker.com/id?1024159
- http://www.vupen.com/english/advisories/2010/1636
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200
- http://secunia.com/secunia_research/2010-88/
- http://www.adobe.com/support/security/bulletins/apsb10-15.html
- http://www.securityfocus.com/archive/1/512092/100/0/threaded
- http://www.securityfocus.com/bid/41241
- http://www.securitytracker.com/id?1024159
- http://www.vupen.com/english/advisories/2010/1636
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-2206",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "psirt@adobe.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-06-30T18:30:01.660",
"references": [
{
"url": "http://secunia.com/secunia_research/2010-88/",
"source": "psirt@adobe.com"
},
{
"url": "http://www.adobe.com/support/security/bulletins/apsb10-15.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@adobe.com"
},
{
"url": "http://www.securityfocus.com/archive/1/512092/100/0/threaded",
"source": "psirt@adobe.com"
},
{
"url": "http://www.securityfocus.com/bid/41241",
"source": "psirt@adobe.com"
},
{
"url": "http://www.securitytracker.com/id?1024159",
"source": "psirt@adobe.com"
},
{
"url": "http://www.vupen.com/english/advisories/2010/1636",
"source": "psirt@adobe.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200",
"source": "psirt@adobe.com"
},
{
"url": "http://secunia.com/secunia_research/2010-88/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.adobe.com/support/security/bulletins/apsb10-15.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/512092/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/41241",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1024159",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2010/1636",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7200",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-189"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow."
},
{
"lang": "es",
"value": "Error de índice de matriz en archivo AcroForm.api en Adobe Reader y Acrobat versión 9.x anterior a 9.3.3 y versión 8.x anterior a 8.2.3 en Windows y Mac OS X, permite a los atacantes remotos ejecutar código arbitrario por medio de una imagen GIF creada en un archivo PDF, lo que omite una comprobación de tamaño y desencadena un desbordamiento de búfer en la región heap de la memoria."
}
],
"lastModified": "2026-06-16T23:20:17.623",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AA53564-9ACD-4CFB-9AAC-A77440026A57"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7EC46E3-77B7-4455-B3E0-A45C6B69B3DC"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F475858-DCE2-4C93-A51A-04718DF17593"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88687272-4CD0-42A2-B727-C322ABDE3549"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E5C4FA4-3786-47AF-BD7D-8E75927EB3AA"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B35CC915-EEE3-4E86-9E09-1893C725E07B"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76201694-E5C5-4CA3-8919-46937AFDAAE3"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "397AB988-1C2C-4247-9B34-806094197CB5"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FA0B8C3-8060-4685-A241-9852BD63B7A0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
},
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "562772F1-1627-438E-A6B8-7D1AA5536086"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27D5AF92-A8E1-41BD-B20A-EB26BB6AD4DE"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F25C9167-C6D4-4264-9197-50878EDA2D96"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD1D7308-09E9-42B2-8836-DC2326C62A9E"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5C251D2-4C9B-4029-8BED-0FCAED3B8E89"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2432AC17-5378-4C61-A775-5172FD44EC03"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6BA82F4-470D-4A46-89B2-D2F3C8FA31C8"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39EDED39-664F-4B68-B422-2CCCA3B83550"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:9.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B508C5CE-1386-47B3-B301-B78DBB3A75D9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
},
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26AE76F7-D7F6-4AF2-A5C6-708B5642C288"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "749FFB51-65D4-4A4B-95F3-742440276897"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8665E53-EC1E-4B95-9064-2565BC12113E"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24218FDA-F9DA-465A-B5D5-76A55C7EE04E"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2C5F1C5-85CD-47B9-897F-E51D6902AF72"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0E190FF-3EBC-44AB-8072-4D964E843E8A"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A624D44-C135-4ED3-9BA4-F4F8A044850B"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B95C0A99-42E4-40A9-BF61-507E4E4DC052"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B9F55CC-3681-4A67-99D1-3F40447392D5"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9C0AC89-804B-44A1-929A-118993B6BAA7"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39B174C3-1BA6-4654-BFA4-CC126454E147"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat:8.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6ACDAA2B-3977-4590-9F16-5DDB6FF6545B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
},
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "996EB48E-D2A8-49E4-915A-EBDE26A9FB94"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97E20936-EE31-4CEB-A710-3165A28BAD69"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BD9952C-A1D0-4DFB-A292-9B86D7EAE5FD"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5BEA847-A71E-4336-AB67-B3C38847C1C3"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39F6994B-6969-485B-9286-2592B11A47BF"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC533775-B52E-43F0-BF19-1473BE36232D"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18D1C85E-42CC-46F2-A7B6-DAC3C3995330"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4670451-511E-496C-A78A-887366E1E992"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35994F76-CD13-4301-9134-FC0CBEA37D97"
},
{
"criteria": "cpe:2.3:a:adobe:acrobat_reader:8.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FB61191-F955-4DE6-A86B-36E031DE1F99"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
},
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@adobe.com",
"evaluatorSolution": "Per: http://www.adobe.com/support/security/bulletins/apsb10-15.html\r\n\r\n'This update resolves an array-indexing error vulnerability that could lead to code execution (CVE-2010-2206).'"
}