exploitDog

CVE-2009-3953

Опубликовано: 12 янв. 2010

Источник: redhat

CVSS2: 6.8

EPSS Высокий

Описание

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2009-3953
https://nvd.nist.gov/vuln/detail/CVE-2009-3953
https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Дополнительная информация

Статус:

Critical

https://bugzilla.redhat.com/show_bug.cgi?id=554293acroread: multiple code execution flaws (APSB10-02)

EPSS

Процентиль: 100%

0.83855

Высокий

6.8 Medium

CVSS2

Связанные уязвимости

CVE-2009-3953

CVSS3: 8.8

nvd

больше 16 лет назад

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

GHSA-q4f6-24ph-r6rm

CVSS3: 8.8

github

больше 4 лет назад

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

EPSS

Процентиль: 100%

0.83855

Высокий

6.8 Medium

CVSS2