← Zuruck zu CVEs

CVE-2009-3953

HIGHCISA KEV

8.8

Beschreibung

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

CVE Details

CVSS v3.1 Bewertung8.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht1/13/2010

Zuletzt geandert4/21/2026

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerAdobe

ProduktAcrobat and Reader

SchwachstellennameAdobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

KEV Aufnahmedatum2022-06-08

Behebungsfrist2022-06-22

Ransomware-NutzungUnknown

Betroffene Produkte

adobe:acrobatapple:mac_os_xmicrosoft:windowsopensuse:opensusesuse:linux_enterprisesuse:linux_enterprise_debuginfo

Schwachen (CWE)

CWE-787CWE-787

Referenzen

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html(psirt@adobe.com)

http://osvdb.org/61690(psirt@adobe.com)

http://secunia.com/advisories/38138(psirt@adobe.com)

http://secunia.com/advisories/38215(psirt@adobe.com)

http://www.adobe.com/support/security/bulletins/apsb10-02.html(psirt@adobe.com)

http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl(psirt@adobe.com)

http://www.redhat.com/support/errata/RHSA-2010-0060.html(psirt@adobe.com)

http://www.securityfocus.com/bid/37758(psirt@adobe.com)

http://www.securitytracker.com/id?1023446(psirt@adobe.com)

http://www.us-cert.gov/cas/techalerts/TA10-013A.html(psirt@adobe.com)

http://www.vupen.com/english/advisories/2010/0103(psirt@adobe.com)

https://bugzilla.redhat.com/show_bug.cgi?id=554293(psirt@adobe.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/55551(psirt@adobe.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242(psirt@adobe.com)

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html(af854a3a-2127-422b-91ae-364da2661108)

http://osvdb.org/61690(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/38138(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/38215(af854a3a-2127-422b-91ae-364da2661108)

http://www.adobe.com/support/security/bulletins/apsb10-02.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2010-0060.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/37758(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1023446(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA10-013A.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/0103(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=554293(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/55551(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3953(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.