Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-3954
HistoryJan 13, 2010 - 7:30 p.m.

CVE-2009-3954

2010-01-1319:30:00
CWE-94
[email protected]
web.nvd.nist.gov
8

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.025

Percentile

90.1%

JSON

The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a “DLL-loading vulnerability.”

Affected configurations

Nvd
Node
adobeacrobatRange≤9.2
OR
adobeacrobatMatch3.0
OR
adobeacrobatMatch3.1
OR
adobeacrobatMatch4.0
OR
adobeacrobatMatch4.0.5
OR
adobeacrobatMatch4.0.5a
OR
adobeacrobatMatch4.0.5c
OR
adobeacrobatMatch5.0
OR
adobeacrobatMatch5.0.5
OR
adobeacrobatMatch5.0.6
OR
adobeacrobatMatch5.0.10
OR
adobeacrobatMatch6.0
OR
adobeacrobatMatch6.0.1
OR
adobeacrobatMatch6.0.2
OR
adobeacrobatMatch6.0.3
OR
adobeacrobatMatch6.0.4
OR
adobeacrobatMatch6.0.5
OR
adobeacrobatMatch6.0.6
OR
adobeacrobatMatch7.0
OR
adobeacrobatMatch7.0.1
OR
adobeacrobatMatch7.0.2
OR
adobeacrobatMatch7.0.3
OR
adobeacrobatMatch7.0.4
OR
adobeacrobatMatch7.0.5
OR
adobeacrobatMatch7.0.6
OR
adobeacrobatMatch7.0.7
OR
adobeacrobatMatch7.0.8
OR
adobeacrobatMatch7.0.9
OR
adobeacrobatMatch7.1.0
OR
adobeacrobatMatch7.1.1
OR
adobeacrobatMatch7.1.2
OR
adobeacrobatMatch7.1.3
OR
adobeacrobatMatch7.1.4
OR
adobeacrobatMatch8.0
OR
adobeacrobatMatch8.1
OR
adobeacrobatMatch8.1.1
OR
adobeacrobatMatch8.1.2
OR
adobeacrobatMatch8.1.3
OR
adobeacrobatMatch8.1.4
OR
adobeacrobatMatch8.1.5
OR
adobeacrobatMatch8.1.6
OR
adobeacrobatMatch8.1.7
OR
adobeacrobatMatch9.0
OR
adobeacrobatMatch9.1
OR
adobeacrobatMatch9.1.1
OR
adobeacrobatMatch9.1.2
OR
adobeacrobatMatch9.1.3
AND
applemac_os_x
OR
microsoftwindows
Node
adobeacrobat_readerRange≤9.2
OR
adobeacrobat_readerMatch3.0
OR
adobeacrobat_readerMatch3.01
OR
adobeacrobat_readerMatch3.02
OR
adobeacrobat_readerMatch4.0
OR
adobeacrobat_readerMatch4.0.5
OR
adobeacrobat_readerMatch4.0.5a
OR
adobeacrobat_readerMatch4.0.5c
OR
adobeacrobat_readerMatch4.5
OR
adobeacrobat_readerMatch5.0
OR
adobeacrobat_readerMatch5.0.5
OR
adobeacrobat_readerMatch5.0.6
OR
adobeacrobat_readerMatch5.0.7
OR
adobeacrobat_readerMatch5.0.9
OR
adobeacrobat_readerMatch5.0.10
OR
adobeacrobat_readerMatch5.0.11
OR
adobeacrobat_readerMatch5.1
OR
adobeacrobat_readerMatch6.0
OR
adobeacrobat_readerMatch6.0.1
OR
adobeacrobat_readerMatch6.0.2
OR
adobeacrobat_readerMatch6.0.3
OR
adobeacrobat_readerMatch6.0.4
OR
adobeacrobat_readerMatch6.0.5
OR
adobeacrobat_readerMatch7.0
OR
adobeacrobat_readerMatch7.0.1
OR
adobeacrobat_readerMatch7.0.2
OR
adobeacrobat_readerMatch7.0.3
OR
adobeacrobat_readerMatch7.0.4
OR
adobeacrobat_readerMatch7.0.5
OR
adobeacrobat_readerMatch7.0.6
OR
adobeacrobat_readerMatch7.0.7
OR
adobeacrobat_readerMatch7.0.8
OR
adobeacrobat_readerMatch7.0.9
OR
adobeacrobat_readerMatch7.1.0
OR
adobeacrobat_readerMatch7.1.1
OR
adobeacrobat_readerMatch7.1.2
OR
adobeacrobat_readerMatch7.1.3
OR
adobeacrobat_readerMatch8.0
OR
adobeacrobat_readerMatch8.1
OR
adobeacrobat_readerMatch8.1.1
OR
adobeacrobat_readerMatch8.1.2
OR
adobeacrobat_readerMatch8.1.4
OR
adobeacrobat_readerMatch8.1.5
OR
adobeacrobat_readerMatch8.1.6
OR
adobeacrobat_readerMatch8.1.7
OR
adobeacrobat_readerMatch9.0
OR
adobeacrobat_readerMatch9.1
OR
adobeacrobat_readerMatch9.1.1
OR
adobeacrobat_readerMatch9.1.2
OR
adobeacrobat_readerMatch9.1.3
AND
applemac_os_x
OR
microsoftwindows
OR
unixunix

Related

cvelist 1
prion 1
checkpoint_advisories 1
cve 1
nessus 14
redhat 3
openvas 4
threatpost 1
securityvulns 2
suse 1
cvelist
cvelist
CVE-2009-3954
2010-01-13 19:00:00
prion
prion
Code injection
2010-01-13 19:30:00
checkpoint_advisories
checkpoint_advisories
Adobe Reader U3D DLL Loading Remote Code Execution (APSB10-02; CVE-2009-3954)
2010-01-13 00:00:00
cve
cve
CVE-2009-3954
2010-01-13 19:30:00
nessus
nessus
RHEL 3 : acroread (RHSA-2010:0060)
2013-01-24 00:00:00
RHEL 5 : acroread (RHSA-2010:0037)
2013-01-24 00:00:00
RHEL 4 : acroread (RHSA-2010:0038)
2013-01-24 00:00:00
redhat
redhat
(RHSA-2010:0037) Critical: acroread security and bug fix update
2010-01-13 00:00:00
(RHSA-2010:0038) Critical: acroread security update
2010-01-13 00:00:00
(RHSA-2010:0060) Critical: acroread security update
2010-01-20 00:00:00
openvas
openvas
Adobe Reader Multiple Vulnerabilities (Jan 2010) - Linux
2010-01-16 00:00:00
Adobe Reader/Acrobat Multiple Vulnerabilities (Jan 2010) - Windows
2010-01-16 00:00:00
SuSE Update for acroread SUSE-SA:2010:008
2010-01-29 00:00:00
threatpost
threatpost
Adobe PDF Reader Gets Another Security Makeover
2010-01-13 15:57:31
securityvulns
securityvulns
Security updates available for Adobe Reader and Acrobat
2010-01-17 00:00:00
Adobe Acrobat and Reader multiple security vulnerabilities
2010-03-15 00:00:00
suse
suse
remote code execution in acroread
2010-01-26 16:40:23

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.025

Percentile

90.1%

JSON
Related for NVD:CVE-2009-3954
cvelist1prion1checkpoint_advisories1cve1nessus14redhat3openvas4threatpost1securityvulns2suse1