CVE-2009-3930
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote...
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
- Record
CVE-2009-3930- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
- Record
CVE-2009-3930- Updated
- 2026-11-02
EUVDEUVD-2009-3901 No score
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
- Record
EUVD-2009-3901- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-462f-9822-gvw7 No score
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote...
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
- Record
GHSA-462f-9822-gvw7- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
- Record
CVE-2009-3930- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-3930 No score
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
- Record
DEBIAN-CVE-2009-3930- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-3930 is a high vulnerability (CVSS 9.3) in Christos Zoulas File, published November 10, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. Fixed in file 5.03-1.