RCE in Adobe Acrobat
CVE-2009-3954
The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a "DLL-loading vulnerability."
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.090 (94.7th percentile) — read the EPSS interpretation.
Affected products
- Adobe Acrobat — versions 3.0, 3.1, 4.0
- Adobe Acrobat_reader — versions 3.0, 3.01, 3.02
- Apple Mac_os_x
- Microsoft Windows
- Unix
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@adobe.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@adobe.com (vdb-entry, x_refsource_XF)
- psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@adobe.com (x_refsource_REDHAT, vendor-advisory)
- psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
- psirt@adobe.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@adobe.com (vdb-entry, x_refsource_SECTRACK)
- psirt@adobe.com (vdb-entry, x_refsource_BID)
- psirt@adobe.com (x_refsource_CONFIRM)
- psirt@adobe.com (x_refsource_SECUNIA, third-party-advisory)