CVEvulnerability

CVE-2009-3954

10.0 HIGH Published 2010-01-13 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-01-13
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a "DLL-loading vulnerability."

Affected configurations

• adobe acrobat (<= 9.2) • adobe acrobat 3.0 • adobe acrobat 3.1 • adobe acrobat 4.0 • adobe acrobat 4.0.5 • adobe acrobat 4.0.5a • adobe acrobat 4.0.5c • adobe acrobat 5.0 • adobe acrobat 5.0.5 • adobe acrobat 5.0.6 • adobe acrobat 5.0.10 • adobe acrobat 6.0 • adobe acrobat 6.0.1 • adobe acrobat 6.0.2 • adobe acrobat 6.0.3 • adobe acrobat 6.0.4 • adobe acrobat 6.0.5 • adobe acrobat 6.0.6 • adobe acrobat 7.0 • adobe acrobat 7.0.1 • adobe acrobat 7.0.2 • adobe acrobat 7.0.3 • adobe acrobat 7.0.4 • adobe acrobat 7.0.5 • adobe acrobat 7.0.6 • adobe acrobat 7.0.7 • adobe acrobat 7.0.8 • adobe acrobat 7.0.9 • adobe acrobat 7.1.0 • adobe acrobat 7.1.1 • adobe acrobat 7.1.2 • adobe acrobat 7.1.3 • adobe acrobat 7.1.4 • adobe acrobat 8.0 • adobe acrobat 8.1 • adobe acrobat 8.1.1 • adobe acrobat 8.1.2 • adobe acrobat 8.1.3 • adobe acrobat 8.1.4 • adobe acrobat 8.1.5 • adobe acrobat 8.1.6 • adobe acrobat 8.1.7 • adobe acrobat 9.0 • adobe acrobat 9.1 • adobe acrobat 9.1.1 • adobe acrobat 9.1.2 • adobe acrobat 9.1.3 • adobe acrobat reader (<= 9.2) • adobe acrobat reader 3.0 • adobe acrobat reader 3.01 • adobe acrobat reader 3.02 • adobe acrobat reader 4.0 • adobe acrobat reader 4.0.5 • adobe acrobat reader 4.0.5a • adobe acrobat reader 4.0.5c • adobe acrobat reader 4.5 • adobe acrobat reader 5.0 • adobe acrobat reader 5.0.5 • adobe acrobat reader 5.0.6 • adobe acrobat reader 5.0.7 … and 37 more

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References