{"id":"CVE-2009-3954","aliases":["EUVD-2009-3925","GHSA-gphr-x7qg-mp2c","RHSA-2010:0037","RHSA-2010:0038","RHSA-2010:0060"],"status":"published","title":"The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows...","description":"The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a \"DLL-loading vulnerability.\"","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0905,"percentile":0.95318,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2010-01-13T19:00:00Z","modified":"2026-06-29T10:02:57Z","affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:3","package":"acroread-uninstall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-3"}]}],"bundled":6}],"products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat_reader"}],"references":[{"url":"http://secunia.com/advisories/38138","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55552","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-02.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","article"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0060.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8528","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2010/0103","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1023446","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/37761","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=554293","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://secunia.com/advisories/38215","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-013A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3954","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gphr-x7qg-mp2c"},{"url":"https://access.redhat.com/errata/RHSA-2010:0037","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=472975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=473217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=554296","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0037.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3953","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3954","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3954","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3955","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3955","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3959","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3959","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3959","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-4324","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4324","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4324","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0038","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0038.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0060","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0060.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-3954","description":"The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a \"DLL-loading vulnerability.\"","status":"published","published":"2010-01-13T19:00:00Z","modified":"2024-08-07T06:45:50.66Z","updated_at":"2026-11-02T14:33:23.749891Z"}],"euvd":[{"id":"EUVD-2009-3925","description":"The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a \"DLL-loading vulnerability.\"","status":"published","published":"2010-01-13T19:00:00Z","modified":"2024-08-07T06:45:50Z","updated_at":"2026-11-03T01:39:11.734855Z"}],"ghsa":[{"id":"GHSA-gphr-x7qg-mp2c","title":"The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows...","description":"The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a \"DLL-loading vulnerability.\"","status":"published","published":"2022-05-02T03:50:11Z","modified":"2023-01-31T05:08:03Z","cwes":["CWE-94"],"updated_at":"2026-11-02T14:49:19.883163Z"}],"nvd":[{"id":"CVE-2009-3954","description":"The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a \"DLL-loading vulnerability.\"","status":"published","published":"2010-01-13T19:30:00.407Z","modified":"2026-06-16T23:12:41.933Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:01:38.33745Z"}],"osv":[{"id":"RHSA-2010:0037","title":"Red Hat Security Advisory: acroread security and bug fix update","status":"published","published":"2024-09-13T06:46:11Z","modified":"2026-06-29T10:02:53Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2010:0038","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T06:46:15Z","modified":"2026-06-29T10:02:53Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2010:0060","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T06:46:46Z","modified":"2026-06-29T10:02:57Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}