CVEvulnerability
CVE-2009-3959
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-01-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document.
Affected configurations
• adobe acrobat (<= 9.2)
• adobe acrobat 3.0
• adobe acrobat 3.1
• adobe acrobat 4.0
• adobe acrobat 4.0.5
• adobe acrobat 4.0.5a
• adobe acrobat 4.0.5c
• adobe acrobat 5.0
• adobe acrobat 5.0.5
• adobe acrobat 5.0.6
• adobe acrobat 5.0.10
• adobe acrobat 6.0
• adobe acrobat 6.0.1
• adobe acrobat 6.0.2
• adobe acrobat 6.0.3
• adobe acrobat 6.0.4
• adobe acrobat 6.0.5
• adobe acrobat 6.0.6
• adobe acrobat 7.0
• adobe acrobat 7.0.1
• adobe acrobat 7.0.2
• adobe acrobat 7.0.3
• adobe acrobat 7.0.4
• adobe acrobat 7.0.5
• adobe acrobat 7.0.6
• adobe acrobat 7.0.7
• adobe acrobat 7.0.8
• adobe acrobat 7.0.9
• adobe acrobat 7.1.0
• adobe acrobat 7.1.1
• adobe acrobat 7.1.2
• adobe acrobat 7.1.3
• adobe acrobat 7.1.4
• adobe acrobat 8.0
• adobe acrobat 8.1
• adobe acrobat 8.1.1
• adobe acrobat 8.1.2
• adobe acrobat 8.1.3
• adobe acrobat 8.1.4
• adobe acrobat 8.1.5
• adobe acrobat 8.1.6
• adobe acrobat 8.1.7
• adobe acrobat 9.0
• adobe acrobat 9.1
• adobe acrobat 9.1.1
• adobe acrobat 9.1.2
• adobe acrobat 9.1.3
• adobe acrobat reader (<= 9.2)
• adobe acrobat reader 3.0
• adobe acrobat reader 3.01
• adobe acrobat reader 3.02
• adobe acrobat reader 4.0
• adobe acrobat reader 4.0.5
• adobe acrobat reader 4.0.5a
• adobe acrobat reader 4.0.5c
• adobe acrobat reader 4.5
• adobe acrobat reader 5.0
• adobe acrobat reader 5.0.5
• adobe acrobat reader 5.0.6
• adobe acrobat reader 5.0.7
… and 37 more
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html lists.opensuse.org
- http://secunia.com/advisories/38138 secunia.com
- http://secunia.com/advisories/38215 secunia.com
- http://www.adobe.com/support/security/bulletins/apsb10-02.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0060.html www.redhat.com
- http://www.securityfocus.com/archive/1/508949 www.securityfocus.com
- http://www.securityfocus.com/bid/37756 www.securityfocus.com
- http://www.securitytracker.com/id?1023446 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-013A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/0103 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=554293 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55557 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8539 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html lists.opensuse.org
- http://secunia.com/advisories/38138 secunia.com
- http://secunia.com/advisories/38215 secunia.com
- http://www.adobe.com/support/security/bulletins/apsb10-02.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0060.html www.redhat.com
- http://www.securityfocus.com/archive/1/508949 www.securityfocus.com
- http://www.securityfocus.com/bid/37756 www.securityfocus.com
- http://www.securitytracker.com/id?1023446 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-013A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/0103 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=554293 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55557 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8539 oval.cisecurity.org