CVEvulnerability
CVE-2009-3958
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-01-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters.
Affected configurations
• adobe acrobat (<= 9.2)
• adobe acrobat 3.0
• adobe acrobat 3.1
• adobe acrobat 4.0
• adobe acrobat 4.0.5
• adobe acrobat 4.0.5a
• adobe acrobat 4.0.5c
• adobe acrobat 5.0
• adobe acrobat 5.0.5
• adobe acrobat 5.0.6
• adobe acrobat 5.0.10
• adobe acrobat 6.0
• adobe acrobat 6.0.1
• adobe acrobat 6.0.2
• adobe acrobat 6.0.3
• adobe acrobat 6.0.4
• adobe acrobat 6.0.5
• adobe acrobat 6.0.6
• adobe acrobat 7.0
• adobe acrobat 7.0.1
• adobe acrobat 7.0.2
• adobe acrobat 7.0.3
• adobe acrobat 7.0.4
• adobe acrobat 7.0.5
• adobe acrobat 7.0.6
• adobe acrobat 7.0.7
• adobe acrobat 7.0.8
• adobe acrobat 7.0.9
• adobe acrobat 7.1.0
• adobe acrobat 7.1.1
• adobe acrobat 7.1.2
• adobe acrobat 7.1.3
• adobe acrobat 7.1.4
• adobe acrobat 8.0
• adobe acrobat 8.1
• adobe acrobat 8.1.1
• adobe acrobat 8.1.2
• adobe acrobat 8.1.3
• adobe acrobat 8.1.4
• adobe acrobat 8.1.5
• adobe acrobat 8.1.6
• adobe acrobat 8.1.7
• adobe acrobat 9.0
• adobe acrobat 9.1
• adobe acrobat 9.1.1
• adobe acrobat 9.1.2
• adobe acrobat 9.1.3
• adobe acrobat reader (<= 9.2)
• adobe acrobat reader 3.0
• adobe acrobat reader 3.01
• adobe acrobat reader 3.02
• adobe acrobat reader 4.0
• adobe acrobat reader 4.0.5
• adobe acrobat reader 4.0.5a
• adobe acrobat reader 4.0.5c
• adobe acrobat reader 4.5
• adobe acrobat reader 5.0
• adobe acrobat reader 5.0.5
• adobe acrobat reader 5.0.6
• adobe acrobat reader 5.0.7
… and 37 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html lists.opensuse.org
- http://www.adobe.com/support/security/bulletins/apsb10-02.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/773545 US Government Resource
- http://www.securityfocus.com/bid/37759 www.securityfocus.com
- http://www.securitytracker.com/id?1023446 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-013A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/0103 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55556 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8455 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html lists.opensuse.org
- http://www.adobe.com/support/security/bulletins/apsb10-02.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/773545 US Government Resource
- http://www.securityfocus.com/bid/37759 www.securityfocus.com
- http://www.securitytracker.com/id?1023446 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-013A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/0103 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55556 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8455 oval.cisecurity.org