CVE-2009-3959

N/A Unknown

Published: January 13, 2010 Modified: April 23, 2026

Description

Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html

Source: psirt@adobe.com

http://secunia.com/advisories/38138

Source: psirt@adobe.com

http://secunia.com/advisories/38215

Source: psirt@adobe.com

http://www.adobe.com/support/security/bulletins/apsb10-02.html

Source: psirt@adobe.com

Patch Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2010-0060.html

Source: psirt@adobe.com

http://www.securityfocus.com/archive/1/508949

Source: psirt@adobe.com

http://www.securityfocus.com/bid/37756

Source: psirt@adobe.com

http://www.securitytracker.com/id?1023446

Source: psirt@adobe.com

http://www.us-cert.gov/cas/techalerts/TA10-013A.html

Source: psirt@adobe.com

US Government Resource

http://www.vupen.com/english/advisories/2010/0103

Source: psirt@adobe.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=554293

Source: psirt@adobe.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/55557

Source: psirt@adobe.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8539

Source: psirt@adobe.com

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html