← Database

CVE-2009-3953

HIGH CVSS: 8.8 Published: 2010-01-13 Modified: 2026-06-16

Description

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

Affected Platforms

Adobe AcrobatMicrosoft WindowsApple Mac Os XSuse Linux Enterprise DebuginfoOpensuse OpensuseSuse Linux Enterprise

Weakness Type

CWE-787, CWE-787

References