← Back

CVE-2009-3955

nvd nist
Published: Jan 13, 2010Modified: Apr 23, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c stream of a JpxDecode encoded data stream, which triggers an integer sign extension that bypasses a sanity check, leading to memory corruption.

Affected (97)

2 products
Acrobat
Acrobat Reader
Configuration A
47 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Up to 9.2
Version 3.0
Version 3.1
Version 4.0.5
Version 4.0.5a
Version 4.0.5c
Version 4.0
Version 5.0.10
Version 5.0.5
Version 5.0.6
Version 5.0
Version 6.0.1
Version 6.0.2
Version 6.0.3
Version 6.0.4
Version 6.0.5
Version 6.0.6
Version 6.0
Version 7.0.1
Version 7.0.2
Version 7.0.3
Version 7.0.4
Version 7.0.5
Version 7.0.6
Version 7.0.7
Version 7.0.8
Version 7.0.9
Version 7.0
Version 7.1.0
Version 7.1.1
Version 7.1.2
Version 7.1.3
Version 7.1.4
Version 8.0
Version 8.1.1
Version 8.1.2
Version 8.1.3
Version 8.1.4
Version 8.1.5
Version 8.1.6
Version 8.1.7
Version 8.1
Version 9.0
Version 9.1.1
Version 9.1.2
Version 9.1.3
Version 9.1
Configuration B
50 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Adobe
Up to 9.2
Version 3.01
Version 3.02
Version 3.0
Version 4.0.5
Version 4.0.5a
Version 4.0.5c
Version 4.0
Version 4.5
Version 5.0.10
Version 5.0.11
Version 5.0.5
Version 5.0.6
Version 5.0.7
Version 5.0.9
Version 5.0
Version 5.1
Version 6.0.1
Version 6.0.2
Version 6.0.3
Version 6.0.4
Version 6.0.5
Version 6.0
Version 7.0.1
Version 7.0.2
Version 7.0.3
Version 7.0.4
Version 7.0.5
Version 7.0.6
Version 7.0.7
Version 7.0.8
Version 7.0.9
Version 7.0
Version 7.1.0
Version 7.1.1
Version 7.1.2
Version 7.1.3
Version 8.0
Version 8.1.1
Version 8.1.2
Version 8.1.4
Version 8.1.5
Version 8.1.6
Version 8.1.7
Version 8.1
Version 9.0
Version 9.1.1
Version 9.1.2
Version 9.1.3
Version 9.1
Running on/withPlatform Versions
Apple
Mac Os X
All versions
Microsoft
Windows
All versions

Related CWEs

References (26)

Source: psirt@adobe.com
PatchVendor Advisory
Source: psirt@adobe.com
US Government Resource
Source: psirt@adobe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.