CVE-2009-3959

high · 10

Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document.

CVSS

11.5%

EPSS (exploit prob.)

96th

EPSS percentile

2010-01-13

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-189

Affected products

Vendor	Product	Affected versions
adobe	acrobat	<= 9.2
adobe	acrobat	3.0
adobe	acrobat	3.1
adobe	acrobat	4.0
adobe	acrobat	4.0.5
adobe	acrobat	4.0.5a
adobe	acrobat	4.0.5c
adobe	acrobat	5.0
adobe	acrobat	5.0.5
adobe	acrobat	5.0.6
adobe	acrobat	5.0.10
adobe	acrobat	6.0
adobe	acrobat	6.0.1
adobe	acrobat	6.0.2
adobe	acrobat	6.0.3
adobe	acrobat	6.0.4
adobe	acrobat	6.0.5
adobe	acrobat	6.0.6
adobe	acrobat	7.0
adobe	acrobat	7.0.1
adobe	acrobat	7.0.2
adobe	acrobat	7.0.3
adobe	acrobat	7.0.4
adobe	acrobat	7.0.5
adobe	acrobat	7.0.6
adobe	acrobat	7.0.7
adobe	acrobat	7.0.8
adobe	acrobat	7.0.9
adobe	acrobat	7.1.0
adobe	acrobat	7.1.1
adobe	acrobat	7.1.2
adobe	acrobat	7.1.3
adobe	acrobat	7.1.4
adobe	acrobat	8.0
adobe	acrobat	8.1
adobe	acrobat	8.1.1
adobe	acrobat	8.1.2
adobe	acrobat	8.1.3
adobe	acrobat	8.1.4
adobe	acrobat	8.1.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-3959