{"id":"CVE-2009-3958","aliases":["EUVD-2009-3929","GHSA-9h4m-rpg2-qjcw"],"status":"published","title":"Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control...","description":"Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.52586,"percentile":0.98974,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2010-01-13T19:00:00Z","modified":"2026-06-16T23:12:42Z","exploits":[{"source":"exploitdb","id":"EDB-11172","title":"Adobe GetPlus get_atlcom 1.6.2.48 - ActiveX Remote Execution","type":"remote","platform":"windows","date":"2010-01-17","url":"https://www.exploit-db.com/exploits/11172"}],"products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat_reader"}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8455","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.securityfocus.com/bid/37759","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-02.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0103","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1023446","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55556","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/773545","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-013A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3958"},{"url":"https://github.com/advisories/GHSA-9h4m-rpg2-qjcw"}],"sources":{"cve":[{"id":"CVE-2009-3958","description":"Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters.","status":"published","published":"2010-01-13T19:00:00Z","modified":"2024-08-07T06:45:50.695Z","updated_at":"2026-11-02T14:33:23.749891Z"}],"euvd":[{"id":"EUVD-2009-3929","description":"Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters.","status":"published","published":"2010-01-13T19:00:00Z","modified":"2024-08-07T06:45:50Z","updated_at":"2026-11-03T01:39:11.734855Z"}],"ghsa":[{"id":"GHSA-9h4m-rpg2-qjcw","title":"Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control...","description":"Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters.","status":"published","published":"2022-05-02T03:50:13Z","modified":"2023-01-31T05:08:30Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:49:24.756389Z"}],"nvd":[{"id":"CVE-2009-3958","description":"Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters.","status":"published","published":"2010-01-13T19:30:00.56Z","modified":"2026-06-16T23:12:42.523Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:38.33745Z"}]}}