VULNERABILITY INTELLIGENCE

CVE-2009-3953

CVSS score8.8 HIGH
EPSS probability83.22%
CISA KEVKnown exploited vulnerability
Published2010-01-13
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

Vendor / product: Adobe / Acrobat and Reader

Description

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references