CVE-2010-2206

CVE-2010-2206 describes an array index error in AcroForm.api within Adobe Reader and Acrobat versions 9.x prior to 9.3.3 and 8.x prior to 8.2.3 on Windows and Mac OS X. This vulnerability allows remote attackers to execute arbitrary code by embedding a specially crafted GIF image in a PDF file, which bypasses size checks and leads to a heap-based buffer overflow. With a CVSS score of 9.3, this is a critical vulnerability, indicating a network-based attack with medium complexity that could result in complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage, suggesting it is not currently a high-profile threat.