Actively exploited · Published Jan 13, 2010 · Assigned by adobe
CVE-2009-3953
High 8.8 Exploited
In plain English
A high-severity out-of-bounds write in Acrobat and Reader from Adobe. Attackers are actively exploiting it in the wild (listed by CISA on June 8, 2022). The chance it is exploited in the next 30 days is estimated at 83.2% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Jun 22, 2022.
Official description
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.
Affected products (as reported)
Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl x_refsource_MISC
- 38138 third-party-advisory, x_refsource_SECUNIA
- oval:org.mitre.oval:def:8242 vdb-entry, signature, x_refsource_OVAL
- http://www.adobe.com/support/security/bulletins/apsb10-02.html x_refsource_CONFIRM
- RHSA-2010:0060 vendor-advisory, x_refsource_REDHAT
- ADV-2010-0103 vdb-entry, x_refsource_VUPEN
- 1023446 vdb-entry, x_refsource_SECTRACK
- 61690 vdb-entry, x_refsource_OSVDB
- https://bugzilla.redhat.com/show_bug.cgi?id=554293 x_refsource_CONFIRM
- acrobat-reader-u3d-code-execution(55551) vdb-entry, x_refsource_XF
- 38215 third-party-advisory, x_refsource_SECUNIA
- SUSE-SA:2010:008 vendor-advisory, x_refsource_SUSE
- TA10-013A third-party-advisory, x_refsource_CERT
- 37758 vdb-entry, x_refsource_BID
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3953 government-resource