CVEvulnerability
CVE-2009-3954
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-01-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-94
Description
The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a "DLL-loading vulnerability."
Affected configurations
• adobe acrobat (<= 9.2)
• adobe acrobat 3.0
• adobe acrobat 3.1
• adobe acrobat 4.0
• adobe acrobat 4.0.5
• adobe acrobat 4.0.5a
• adobe acrobat 4.0.5c
• adobe acrobat 5.0
• adobe acrobat 5.0.5
• adobe acrobat 5.0.6
• adobe acrobat 5.0.10
• adobe acrobat 6.0
• adobe acrobat 6.0.1
• adobe acrobat 6.0.2
• adobe acrobat 6.0.3
• adobe acrobat 6.0.4
• adobe acrobat 6.0.5
• adobe acrobat 6.0.6
• adobe acrobat 7.0
• adobe acrobat 7.0.1
• adobe acrobat 7.0.2
• adobe acrobat 7.0.3
• adobe acrobat 7.0.4
• adobe acrobat 7.0.5
• adobe acrobat 7.0.6
• adobe acrobat 7.0.7
• adobe acrobat 7.0.8
• adobe acrobat 7.0.9
• adobe acrobat 7.1.0
• adobe acrobat 7.1.1
• adobe acrobat 7.1.2
• adobe acrobat 7.1.3
• adobe acrobat 7.1.4
• adobe acrobat 8.0
• adobe acrobat 8.1
• adobe acrobat 8.1.1
• adobe acrobat 8.1.2
• adobe acrobat 8.1.3
• adobe acrobat 8.1.4
• adobe acrobat 8.1.5
• adobe acrobat 8.1.6
• adobe acrobat 8.1.7
• adobe acrobat 9.0
• adobe acrobat 9.1
• adobe acrobat 9.1.1
• adobe acrobat 9.1.2
• adobe acrobat 9.1.3
• adobe acrobat reader (<= 9.2)
• adobe acrobat reader 3.0
• adobe acrobat reader 3.01
• adobe acrobat reader 3.02
• adobe acrobat reader 4.0
• adobe acrobat reader 4.0.5
• adobe acrobat reader 4.0.5a
• adobe acrobat reader 4.0.5c
• adobe acrobat reader 4.5
• adobe acrobat reader 5.0
• adobe acrobat reader 5.0.5
• adobe acrobat reader 5.0.6
• adobe acrobat reader 5.0.7
… and 37 more
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html lists.opensuse.org
- http://secunia.com/advisories/38138 secunia.com
- http://secunia.com/advisories/38215 secunia.com
- http://www.adobe.com/support/security/bulletins/apsb10-02.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0060.html www.redhat.com
- http://www.securityfocus.com/bid/37761 www.securityfocus.com
- http://www.securitytracker.com/id?1023446 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-013A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/0103 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=554293 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55552 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8528 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html lists.opensuse.org
- http://secunia.com/advisories/38138 secunia.com
- http://secunia.com/advisories/38215 secunia.com
- http://www.adobe.com/support/security/bulletins/apsb10-02.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0060.html www.redhat.com
- http://www.securityfocus.com/bid/37761 www.securityfocus.com
- http://www.securitytracker.com/id?1023446 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-013A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/0103 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=554293 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55552 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8528 oval.cisecurity.org