← Voltar para CVEs

CVE-2009-3953

HIGHCISA KEV

8.8

Descricao

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

Detalhes CVE

Pontuacao CVSS v3.18.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado1/13/2010

Ultima modificacao4/21/2026

Fontekev

Avistamentos honeypot0

CISA KEV

FornecedorAdobe

ProdutoAcrobat and Reader

Nome da vulnerabilidadeAdobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

Data inclusao KEV2022-06-08

Prazo de remediacao2022-06-22

Uso em ransomwareUnknown

Produtos afetados

adobe:acrobatapple:mac_os_xmicrosoft:windowsopensuse:opensusesuse:linux_enterprisesuse:linux_enterprise_debuginfo

Fraquezas (CWE)

CWE-787CWE-787

Referencias

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html(psirt@adobe.com)

http://osvdb.org/61690(psirt@adobe.com)

http://secunia.com/advisories/38138(psirt@adobe.com)

http://secunia.com/advisories/38215(psirt@adobe.com)

http://www.adobe.com/support/security/bulletins/apsb10-02.html(psirt@adobe.com)

http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl(psirt@adobe.com)

http://www.redhat.com/support/errata/RHSA-2010-0060.html(psirt@adobe.com)

http://www.securityfocus.com/bid/37758(psirt@adobe.com)

http://www.securitytracker.com/id?1023446(psirt@adobe.com)

http://www.us-cert.gov/cas/techalerts/TA10-013A.html(psirt@adobe.com)

http://www.vupen.com/english/advisories/2010/0103(psirt@adobe.com)

https://bugzilla.redhat.com/show_bug.cgi?id=554293(psirt@adobe.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/55551(psirt@adobe.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242(psirt@adobe.com)

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html(af854a3a-2127-422b-91ae-364da2661108)

http://osvdb.org/61690(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/38138(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/38215(af854a3a-2127-422b-91ae-364da2661108)

http://www.adobe.com/support/security/bulletins/apsb10-02.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2010-0060.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/37758(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1023446(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA10-013A.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/0103(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=554293(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/55551(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3953(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.