Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-3953
HistoryJan 13, 2010 - 7:30 p.m.

CVE-2009-3953

2010-01-1319:30:00
CWE-119
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.971 High

EPSS

Percentile

99.8%

JSON

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration “array boundary issue,” a different vulnerability than CVE-2009-2994.

Affected configurations

NVD
Node
adobeacrobatRange≤9.2
OR
adobeacrobatMatch3.0
OR
adobeacrobatMatch3.1
OR
adobeacrobatMatch4.0
OR
adobeacrobatMatch4.0.5
OR
adobeacrobatMatch4.0.5a
OR
adobeacrobatMatch4.0.5c
OR
adobeacrobatMatch5.0
OR
adobeacrobatMatch5.0.5
OR
adobeacrobatMatch5.0.6
OR
adobeacrobatMatch5.0.10
OR
adobeacrobatMatch6.0
OR
adobeacrobatMatch6.0.1
OR
adobeacrobatMatch6.0.2
OR
adobeacrobatMatch6.0.3
OR
adobeacrobatMatch6.0.4
OR
adobeacrobatMatch6.0.5
OR
adobeacrobatMatch6.0.6
OR
adobeacrobatMatch7.0
OR
adobeacrobatMatch7.0.1
OR
adobeacrobatMatch7.0.2
OR
adobeacrobatMatch7.0.3
OR
adobeacrobatMatch7.0.4
OR
adobeacrobatMatch7.0.5
OR
adobeacrobatMatch7.0.6
OR
adobeacrobatMatch7.0.7
OR
adobeacrobatMatch7.0.8
OR
adobeacrobatMatch7.0.9
OR
adobeacrobatMatch7.1.0
OR
adobeacrobatMatch7.1.1
OR
adobeacrobatMatch7.1.2
OR
adobeacrobatMatch7.1.3
OR
adobeacrobatMatch7.1.4
OR
adobeacrobatMatch8.0
OR
adobeacrobatMatch8.1
OR
adobeacrobatMatch8.1.1
OR
adobeacrobatMatch8.1.2
OR
adobeacrobatMatch8.1.3
OR
adobeacrobatMatch8.1.4
OR
adobeacrobatMatch8.1.5
OR
adobeacrobatMatch8.1.6
OR
adobeacrobatMatch8.1.7
OR
adobeacrobatMatch9.0
OR
adobeacrobatMatch9.1
OR
adobeacrobatMatch9.1.1
OR
adobeacrobatMatch9.1.2
OR
adobeacrobatMatch9.1.3
AND
applemac_os_x
OR
microsoftwindows
Node
adobeacrobat_readerRange≤9.2
OR
adobeacrobat_readerMatch3.0
OR
adobeacrobat_readerMatch3.01
OR
adobeacrobat_readerMatch3.02
OR
adobeacrobat_readerMatch4.0
OR
adobeacrobat_readerMatch4.0.5
OR
adobeacrobat_readerMatch4.0.5a
OR
adobeacrobat_readerMatch4.0.5c
OR
adobeacrobat_readerMatch4.5
OR
adobeacrobat_readerMatch5.0
OR
adobeacrobat_readerMatch5.0.5
OR
adobeacrobat_readerMatch5.0.6
OR
adobeacrobat_readerMatch5.0.7
OR
adobeacrobat_readerMatch5.0.9
OR
adobeacrobat_readerMatch5.0.10
OR
adobeacrobat_readerMatch5.0.11
OR
adobeacrobat_readerMatch5.1
OR
adobeacrobat_readerMatch6.0
OR
adobeacrobat_readerMatch6.0.1
OR
adobeacrobat_readerMatch6.0.2
OR
adobeacrobat_readerMatch6.0.3
OR
adobeacrobat_readerMatch6.0.4
OR
adobeacrobat_readerMatch6.0.5
OR
adobeacrobat_readerMatch7.0
OR
adobeacrobat_readerMatch7.0.1
OR
adobeacrobat_readerMatch7.0.2
OR
adobeacrobat_readerMatch7.0.3
OR
adobeacrobat_readerMatch7.0.4
OR
adobeacrobat_readerMatch7.0.5
OR
adobeacrobat_readerMatch7.0.6
OR
adobeacrobat_readerMatch7.0.7
OR
adobeacrobat_readerMatch7.0.8
OR
adobeacrobat_readerMatch7.0.9
OR
adobeacrobat_readerMatch7.1.0
OR
adobeacrobat_readerMatch7.1.1
OR
adobeacrobat_readerMatch7.1.2
OR
adobeacrobat_readerMatch7.1.3
OR
adobeacrobat_readerMatch8.0
OR
adobeacrobat_readerMatch8.1
OR
adobeacrobat_readerMatch8.1.1
OR
adobeacrobat_readerMatch8.1.2
OR
adobeacrobat_readerMatch8.1.4
OR
adobeacrobat_readerMatch8.1.5
OR
adobeacrobat_readerMatch8.1.6
OR
adobeacrobat_readerMatch8.1.7
OR
adobeacrobat_readerMatch9.0
OR
adobeacrobat_readerMatch9.1
OR
adobeacrobat_readerMatch9.1.1
OR
adobeacrobat_readerMatch9.1.2
OR
adobeacrobat_readerMatch9.1.3
AND
applemac_os_x
OR
microsoftwindows
OR
unixunix

Related

cve 2
attackerkb 1
cvelist 2
canvas 1
prion 2
checkpoint_advisories 4
packetstorm 2
seebug 3
cisa_kev 1
exploitpack 1
nvd 1
ubuntucve 1
exploitdb 1
securityvulns 2
redhat 4
nessus 28
openvas 14
threatpost 1
suse 2
gentoo 2
cve
cve
CVE-2009-3953
2010-01-13 19:30:00
CVE-2009-2994
2009-10-19 22:30:00
attackerkb
attackerkb
CVE-2009-3953
2010-01-13 00:00:00
cvelist
cvelist
CVE-2009-3953
2010-01-13 19:00:00
CVE-2009-2994
2009-10-19 22:00:00
canvas
canvas
Immunity Canvas: ACROBAT_U3D_MESH
2010-01-13 19:30:00
prion
prion
Design/Logic Flaw
2010-01-13 19:30:00
Buffer overflow
2009-10-19 22:30:00
checkpoint_advisories
checkpoint_advisories
Adobe Reader JPEG2000 Quantization Component Memory Corruption (APSB09-15; CVE-2009-2994)
2009-10-14 00:00:00
Adobe Reader U3D array boundary code execution (APSB10-02: CVE-2009-3953)
2015-05-11 00:00:00
Adobe Acrobat and Reader U3D CLODMeshDeclaration Memory Corruption (CVE-2009-2994)
2012-01-03 00:00:00
packetstorm
packetstorm
Adobe Acrobat Reader Array Overrun
2009-10-27 00:00:00
Adobe U3D CLODProgressiveMeshDeclaration Array Overrun
2009-12-31 00:00:00
seebug
seebug
Adobe Acrobat Reader 7-9 - U3D BoF
2014-07-01 00:00:00
Adobe Acrobat Reader 7-9 U3D BoF
2009-10-27 00:00:00
Adobe Reader: Multiple vulnerabilities
2009-10-27 00:00:00
cisa_kev
cisa_kev
Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
2022-06-08 00:00:00
exploitpack
exploitpack
Adobe Acrobat Reader 7 9 - U3D Buffer Overflow
2009-10-27 00:00:00
nvd
nvd
CVE-2009-2994
2009-10-19 22:30:00
ubuntucve
ubuntucve
CVE-2009-2994
2009-10-19 00:00:00
exploitdb
exploitdb
Adobe Acrobat Reader 7 < 9 - U3D Buffer Overflow
2009-10-27 00:00:00
securityvulns
securityvulns
Security updates available for Adobe Reader and Acrobat
2010-01-17 00:00:00
Adobe Acrobat and Reader multiple security vulnerabilities
2010-03-15 00:00:00
redhat
redhat
(RHSA-2010:0038) Critical: acroread security update
2010-01-13 00:00:00
(RHSA-2010:0037) Critical: acroread security and bug fix update
2010-01-13 00:00:00
(RHSA-2010:0060) Critical: acroread security update
2010-01-20 00:00:00
nessus
nessus
RHEL 5 : acroread (RHSA-2010:0037)
2013-01-24 00:00:00
RHEL 4 : acroread (RHSA-2010:0038)
2013-01-24 00:00:00
RHEL 3 : acroread (RHSA-2010:0060)
2013-01-24 00:00:00
openvas
openvas
Adobe Reader Multiple Vulnerabilities (Jan 2010) - Linux
2010-01-16 00:00:00
Adobe Reader/Acrobat Multiple Vulnerabilities (Jan 2010) - Windows
2010-01-16 00:00:00
SuSE Update for acroread SUSE-SA:2010:008
2010-01-29 00:00:00
threatpost
threatpost
Adobe PDF Reader Gets Another Security Makeover
2010-01-13 15:57:31
suse
suse
remote code execution in acroread
2010-01-26 16:40:23
remote code execution in acroread, acroread_ja
2009-10-26 13:17:31
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2009-10-25 00:00:00
Adobe Reader: Multiple vulnerabilities
2010-09-07 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.971 High

EPSS

Percentile

99.8%

JSON
Related for NVD:CVE-2009-3953
cve2attackerkb1cvelist2canvas1prion2checkpoint_advisories4packetstorm2seebug3cisa_kev1exploitpack1nvd1ubuntucve1exploitdb1securityvulns2redhat4nessus28openvas14threatpost1suse2gentoo2