Array index error in AcroForm.api in Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted GIF image in a PDF file, which bypasses a size check and triggers a heap-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Acrobat | Adobe | 9.0 (including) | 9.0 (including) |
| Acrobat | Adobe | 9.1 (including) | 9.1 (including) |
| Acrobat | Adobe | 9.1.1 (including) | 9.1.1 (including) |
| Acrobat | Adobe | 9.1.2 (including) | 9.1.2 (including) |
| Acrobat | Adobe | 9.1.3 (including) | 9.1.3 (including) |
| Acrobat | Adobe | 9.2 (including) | 9.2 (including) |
| Acrobat | Adobe | 9.3 (including) | 9.3 (including) |
| Acrobat | Adobe | 9.3.1 (including) | 9.3.1 (including) |
| Acrobat | Adobe | 9.3.2 (including) | 9.3.2 (including) |
| Extras for RHEL 4 | RedHat | acroread-0:9.3.3-2.el4 | * |
| Supplementary for Red Hat Enterprise Linux 5 | RedHat | acroread-0:9.3.3-1.el5 | * |
| Acroread | Ubuntu | dapper | * |
| Acroread | Ubuntu | hardy | * |
| Acroread | Ubuntu | jaunty | * |
| Acroread | Ubuntu | karmic | * |
| Acroread | Ubuntu | lucid | * |
| Acroread | Ubuntu | upstream | * |