{"id":"CVE-2009-3953","aliases":["EUVD-2009-3924","GHSA-q4f6-24ph-r6rm","RHSA-2010:0037","RHSA-2010:0038","RHSA-2010:0060"],"status":"published","title":"The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and...","description":"The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration \"array boundary issue,\" a different vulnerability than CVE-2009-2994.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.83219,"percentile":0.99681,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-119","CWE-787"],"published":"2010-01-13T19:00:00Z","modified":"2026-06-29T10:02:57Z","kev":{"date_added":"2022-06-08","due_date":"2022-06-22","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-06-08"},{"source":"kev","since":"2022-06-08"}],"exploits":[{"source":"metasploit","id":"exploit/windows/fileformat/adobe_u3d_meshdecl","title":"Adobe U3D CLODProgressiveMeshDeclaration Array Overrun","type":"exploit","platform":"Windows","date":"2009-10-13","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/fileformat/adobe_u3d_meshdecl"},{"source":"exploitdb","id":"EDB-16622","title":"Adobe - U3D CLODProgressiveMeshDeclaration Array Overrun (Metasploit) (2)","type":"local","platform":"windows","date":"2010-09-25","verified":true,"url":"https://www.exploit-db.com/exploits/16622"}],"affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:3","package":"acroread-uninstall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-3"}]}],"bundled":6}],"products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat and reader"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"suse","product":"linux_enterprise"},{"vendor":"suse","product":"linux_enterprise_debuginfo"}],"references":[{"url":"http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"http://secunia.com/advisories/38138","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-02.html","tags":["x_refsource_CONFIRM","x_transferred","Not Applicable","Patch","Vendor Advisory","article"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0060.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/0103","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1023446","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://osvdb.org/61690","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=554293","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55551","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/38215","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-013A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/37758","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3953","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3953","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-q4f6-24ph-r6rm"},{"url":"https://access.redhat.com/errata/RHSA-2010:0037","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=472975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=473217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=554296","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0037.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3953","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3954","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3954","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3954","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3955","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3955","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3959","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3959","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3959","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-4324","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4324","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4324","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0038","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0038.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0060","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0060.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-3953","description":"The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration \"array boundary issue,\" a different vulnerability than CVE-2009-2994.","status":"published","published":"2010-01-13T19:00:00Z","modified":"2025-10-22T00:05:53.712Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:33:23.749891Z"}],"euvd":[{"id":"EUVD-2009-3924","description":"The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration \"array boundary issue,\" a different vulnerability than CVE-2009-2994.","status":"published","published":"2010-01-13T19:00:00Z","modified":"2025-10-22T00:05:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-06-08","updated_at":"2026-11-02T19:49:39.244432Z"}],"ghsa":[{"id":"GHSA-q4f6-24ph-r6rm","title":"The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and...","description":"The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration \"array boundary issue,\" a different vulnerability than CVE-2009-2994.","status":"published","published":"2022-05-02T03:50:11Z","modified":"2025-10-22T03:31:33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T15:04:09.843024Z"}],"kev":[{"id":"CVE-2009-3953","title":"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","description":"Adobe Acrobat and Reader contains an array boundary issue in Universal 3D (U3D) support that could lead to remote code execution.","cwes":["CWE-119"],"kev":{"date_added":"2022-06-08","due_date":"2022-06-22","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2009-3953","description":"The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration \"array boundary issue,\" a different vulnerability than CVE-2009-2994.","status":"published","published":"2010-01-13T19:30:00.343Z","modified":"2026-06-16T23:12:41.597Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:01:38.33745Z"}],"osv":[{"id":"RHSA-2010:0037","title":"Red Hat Security Advisory: acroread security and bug fix update","status":"published","published":"2024-09-13T06:46:11Z","modified":"2026-06-29T10:02:53Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2010:0038","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T06:46:15Z","modified":"2026-06-29T10:02:53Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2010:0060","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T06:46:46Z","modified":"2026-06-29T10:02:57Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}