Description
Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | acroread +1 | 9.3.3-1.el5 | RHSA-2010:0503 |
| RHEL 4 | acroread +1 | 9.3.3-2.el4 | RHSA-2010:0503 |
Advisories 1
- RHSA-2010:0503 Red Hat Security Advisory: acroread security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- ADV-2010-1636 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb10-15.html
- 20100630 Secunia Research: Adobe Reader GIF Image Parsing Array-Indexing Vulnerability mailing-list
- http://secunia.com/secunia_research/2010-88/
- oval:org.mitre.oval:def:7200 vdb-entry signature
- 1024159 vdb-entry
- 41241 vdb-entry