Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAdobeCVE-2009-3953
HistoryJan 13, 2010 - 7:30 p.m.

CVE-2009-3953

2010-01-1319:30:00
CWE-787
adobe
web.nvd.nist.gov
860
In Wild
cve-2009-3953
adobe reader
acrobat
arbitrary code execution
u3d implementation
pdf
security vulnerability
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

0.969

Percentile

99.8%

JSON

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration “array boundary issue,” a different vulnerability than CVE-2009-2994.

Affected configurations

Nvd
Node
adobeacrobatRange7.0–7.1.4
OR
adobeacrobatRange8.0–8.2
OR
adobeacrobatRange9.0–9.3
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
suselinux_enterprise_debuginfoMatch11-
OR
opensuseopensuseMatch11.1
OR
opensuseopensuseMatch11.2
OR
suselinux_enterpriseMatch10.0sp2
OR
suselinux_enterpriseMatch10.0sp3

Related

nvd 2
attackerkb 1
cvelist 2
prion 2
canvas 1
checkpoint_advisories 4
metasploit 1
cisa_kev 1
exploitdb 2
securityvulns 2
seebug 3
packetstorm 2
exploitpack 1
cve 1
ubuntucve 1
nessus 28
redhat 4
openvas 14
threatpost 1
suse 2
gentoo 2
nvd
nvd
CVE-2009-3953
2010-01-13 19:30:00
CVE-2009-2994
2009-10-19 22:30:00
attackerkb
attackerkb
CVE-2009-3953
2010-01-13 00:00:00
cvelist
cvelist
CVE-2009-3953
2010-01-13 19:00:00
CVE-2009-2994
2009-10-19 22:00:00
prion
prion
Design/Logic Flaw
2010-01-13 19:30:00
Buffer overflow
2009-10-19 22:30:00
canvas
canvas
Immunity Canvas: ACROBAT_U3D_MESH
2010-01-13 19:30:00
checkpoint_advisories
checkpoint_advisories
Adobe Reader U3D array boundary code execution (APSB10-02: CVE-2009-3953)
2015-05-11 00:00:00
Adobe Reader JPEG2000 Quantization Component Memory Corruption (APSB09-15; CVE-2009-2994)
2009-10-14 00:00:00
Adobe Acrobat and Reader U3D CLODMeshDeclaration Memory Corruption (CVE-2009-2994)
2012-01-03 00:00:00
metasploit
metasploit
Adobe U3D CLODProgressiveMeshDeclaration Array Overrun
2009-11-25 22:24:10
cisa_kev
cisa_kev
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
2022-06-08 00:00:00
exploitdb
exploitdb
Adobe - U3D CLODProgressiveMeshDeclaration Array Overrun (Metasploit) (2)
2010-09-25 00:00:00
Adobe Acrobat Reader 7 < 9 - U3D Buffer Overflow
2009-10-27 00:00:00
securityvulns
securityvulns
Security updates available for Adobe Reader and Acrobat
2010-01-17 00:00:00
Adobe Acrobat and Reader multiple security vulnerabilities
2010-03-15 00:00:00
seebug
seebug
Adobe Acrobat Reader 7-9 - U3D BoF
2014-07-01 00:00:00
Adobe Acrobat Reader 7-9 U3D BoF
2009-10-27 00:00:00
Adobe Reader: Multiple vulnerabilities
2009-10-27 00:00:00
packetstorm
packetstorm
Adobe Acrobat Reader Array Overrun
2009-10-27 00:00:00
Adobe U3D CLODProgressiveMeshDeclaration Array Overrun
2009-12-31 00:00:00
exploitpack
exploitpack
Adobe Acrobat Reader 7 9 - U3D Buffer Overflow
2009-10-27 00:00:00
cve
cve
CVE-2009-2994
2009-10-19 22:30:00
ubuntucve
ubuntucve
CVE-2009-2994
2009-10-19 00:00:00
nessus
nessus
RHEL 3 : acroread (RHSA-2010:0060)
2013-01-24 00:00:00
RHEL 5 : acroread (RHSA-2010:0037)
2013-01-24 00:00:00
RHEL 4 : acroread (RHSA-2010:0038)
2013-01-24 00:00:00
redhat
redhat
(RHSA-2010:0038) Critical: acroread security update
2010-01-13 00:00:00
(RHSA-2010:0060) Critical: acroread security update
2010-01-20 00:00:00
(RHSA-2010:0037) Critical: acroread security and bug fix update
2010-01-13 00:00:00
openvas
openvas
Adobe Reader Multiple Vulnerabilities (Jan 2010) - Linux
2010-01-16 00:00:00
Adobe Reader/Acrobat Multiple Vulnerabilities (Jan 2010) - Windows
2010-01-16 00:00:00
SuSE Update for acroread SUSE-SA:2010:008
2010-01-29 00:00:00
threatpost
threatpost
Adobe PDF Reader Gets Another Security Makeover
2010-01-13 15:57:31
suse
suse
remote code execution in acroread
2010-01-26 16:40:23
remote code execution in acroread, acroread_ja
2009-10-26 13:17:31
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2010-09-07 00:00:00
Adobe Reader: Multiple vulnerabilities
2009-10-25 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

Low

EPSS

0.969

Percentile

99.8%

JSON
Related for CVE-2009-3953
nvd2attackerkb1cvelist2prion2canvas1checkpoint_advisories4metasploit1cisa_kev1exploitdb2securityvulns2seebug3packetstorm2exploitpack1cve1ubuntucve1nessus28redhat4openvas14threatpost1suse2gentoo2