{"id":"CVE-2009-3959","state":"PUBLISHED","title":"Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code","description":"Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document.","publishedAt":"2010-01-13T19:00:00.000Z","updatedAt":"2024-08-07T06:45:50.902Z","severity":null,"assigner":"adobe","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/55557","http://secunia.com/advisories/38138","http://www.securityfocus.com/archive/1/508949","http://www.adobe.com/support/security/bulletins/apsb10-02.html","http://www.redhat.com/support/errata/RHSA-2010-0060.html","http://www.securityfocus.com/bid/37756","https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8539","http://www.vupen.com/english/advisories/2010/0103","http://www.securitytracker.com/id?1023446","https://bugzilla.redhat.com/show_bug.cgi?id=554293","http://secunia.com/advisories/38215","http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","http://www.us-cert.gov/cas/techalerts/TA10-013A.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:39:23.319Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2009/3xxx/CVE-2009-3959.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2009-3959","state":"PUBLISHED","datePublished":"2010-01-13T19:00:00.000Z","dateUpdated":"2024-08-07T06:45:50.902Z","assignerShortName":"adobe","assignerOrgId":"078d4453-3bcd-4900-85e6-15281da43538","dateReserved":"2009-11-16T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55557","name":"acrobat-reader-u3dsupport-code-exec(55557)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://secunia.com/advisories/38138","name":"38138","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/archive/1/508949","name":"20100115 VUPEN Security Research - Adobe Acrobat and Reader U3D Integer Overflow Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-02.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0060.html","name":"RHSA-2010:0060","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/bid/37756","name":"37756","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8539","name":"oval:org.mitre.oval:def:8539","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.vupen.com/english/advisories/2010/0103","name":"ADV-2010-0103","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.securitytracker.com/id?1023446","name":"1023446","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=554293","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/38215","name":"38215","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","name":"SUSE-SA:2010:008","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-013A.html","name":"TA10-013A","tags":["third-party-advisory","x_refsource_CERT"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"adobe","dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"078d4453-3bcd-4900-85e6-15281da43538"},"datePublic":"2010-01-12T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@adobe.com","ID":"CVE-2009-3959","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"acrobat-reader-u3dsupport-code-exec(55557)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55557"},{"name":"38138","refsource":"SECUNIA","url":"http://secunia.com/advisories/38138"},{"name":"20100115 VUPEN Security Research - Adobe Acrobat and Reader U3D Integer Overflow Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/508949"},{"name":"http://www.adobe.com/support/security/bulletins/apsb10-02.html","refsource":"CONFIRM","url":"http://www.adobe.com/support/security/bulletins/apsb10-02.html"},{"name":"RHSA-2010:0060","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2010-0060.html"},{"name":"37756","refsource":"BID","url":"http://www.securityfocus.com/bid/37756"},{"name":"oval:org.mitre.oval:def:8539","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8539"},{"name":"ADV-2010-0103","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/0103"},{"name":"1023446","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1023446"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=554293","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=554293"},{"name":"38215","refsource":"SECUNIA","url":"http://secunia.com/advisories/38215"},{"name":"SUSE-SA:2010:008","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html"},{"name":"TA10-013A","refsource":"CERT","url":"http://www.us-cert.gov/cas/techalerts/TA10-013A.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55557","name":"acrobat-reader-u3dsupport-code-exec(55557)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/38138","name":"38138","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/508949","name":"20100115 VUPEN Security Research - Adobe Acrobat and Reader U3D Integer Overflow Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-02.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0060.html","name":"RHSA-2010:0060","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/37756","name":"37756","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8539","name":"oval:org.mitre.oval:def:8539","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2010/0103","name":"ADV-2010-0103","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securitytracker.com/id?1023446","name":"1023446","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=554293","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/38215","name":"38215","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","name":"SUSE-SA:2010:008","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-013A.html","name":"TA10-013A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T06:45:50.902Z"}}]}}}