CVE-2009-3953

Description

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/55551

https://bugzilla.redhat.com/show_bug.cgi?id=554293

http://www.us-cert.gov/cas/techalerts/TA10-013A.html

http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl

http://www.adobe.com/support/security/bulletins/apsb10-02.html

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3