CVE-2009-3958: Buffer Overflow
First published: Tue Jan 12 2010(Updated: )
Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader | <=9.2 | |
| Adobe Acrobat Reader | =3.0 | |
| Adobe Acrobat Reader | =3.1 | |
| Adobe Acrobat Reader | =4.0 | |
| Adobe Acrobat Reader | =4.0.5 | |
| Adobe Acrobat Reader | =4.0.5a | |
| Adobe Acrobat Reader | =4.0.5c | |
| Adobe Acrobat Reader | =5.0 | |
| Adobe Acrobat Reader | =5.0.5 | |
| Adobe Acrobat Reader | =5.0.6 | |
| Adobe Acrobat Reader | =5.0.10 | |
| Adobe Acrobat Reader | =6.0 | |
| Adobe Acrobat Reader | =6.0.1 | |
| Adobe Acrobat Reader | =6.0.2 | |
| Adobe Acrobat Reader | =6.0.3 | |
| Adobe Acrobat Reader | =6.0.4 | |
| Adobe Acrobat Reader | =6.0.5 | |
| Adobe Acrobat Reader | =6.0.6 | |
| Adobe Acrobat Reader | =7.0 | |
| Adobe Acrobat Reader | =7.0.1 | |
| Adobe Acrobat Reader | =7.0.2 | |
| Adobe Acrobat Reader | =7.0.3 | |
| Adobe Acrobat Reader | =7.0.4 | |
| Adobe Acrobat Reader | =7.0.5 | |
| Adobe Acrobat Reader | =7.0.6 | |
| Adobe Acrobat Reader | =7.0.7 | |
| Adobe Acrobat Reader | =7.0.8 | |
| Adobe Acrobat Reader | =7.0.9 | |
| Adobe Acrobat Reader | =7.1.0 | |
| Adobe Acrobat Reader | =7.1.1 | |
| Adobe Acrobat Reader | =7.1.2 | |
| Adobe Acrobat Reader | =7.1.3 | |
| Adobe Acrobat Reader | =7.1.4 | |
| Adobe Acrobat Reader | =8.0 | |
| Adobe Acrobat Reader | =8.1 | |
| Adobe Acrobat Reader | =8.1.1 | |
| Adobe Acrobat Reader | =8.1.2 | |
| Adobe Acrobat Reader | =8.1.3 | |
| Adobe Acrobat Reader | =8.1.4 | |
| Adobe Acrobat Reader | =8.1.5 | |
| Adobe Acrobat Reader | =8.1.6 | |
| Adobe Acrobat Reader | =8.1.7 | |
| Adobe Acrobat Reader | =9.0 | |
| Adobe Acrobat Reader | =9.1 | |
| Adobe Acrobat Reader | =9.1.1 | |
| Adobe Acrobat Reader | =9.1.2 | |
| Adobe Acrobat Reader | =9.1.3 | |
| Apple Mac OS X | ||
| Microsoft Windows | ||
| Adobe Acrobat Reader | <=9.2 | |
| Adobe Acrobat Reader | =3.0 | |
| Adobe Acrobat Reader | =3.01 | |
| Adobe Acrobat Reader | =3.02 | |
| Adobe Acrobat Reader | =4.0 | |
| Adobe Acrobat Reader | =4.0.5 | |
| Adobe Acrobat Reader | =4.0.5a | |
| Adobe Acrobat Reader | =4.0.5c | |
| Adobe Acrobat Reader | =4.5 | |
| Adobe Acrobat Reader | =5.0 | |
| Adobe Acrobat Reader | =5.0.5 | |
| Adobe Acrobat Reader | =5.0.6 | |
| Adobe Acrobat Reader | =5.0.7 | |
| Adobe Acrobat Reader | =5.0.9 | |
| Adobe Acrobat Reader | =5.0.10 | |
| Adobe Acrobat Reader | =5.0.11 | |
| Adobe Acrobat Reader | =5.1 | |
| Adobe Acrobat Reader | =6.0 | |
| Adobe Acrobat Reader | =6.0.1 | |
| Adobe Acrobat Reader | =6.0.2 | |
| Adobe Acrobat Reader | =6.0.3 | |
| Adobe Acrobat Reader | =6.0.4 | |
| Adobe Acrobat Reader | =6.0.5 | |
| Adobe Acrobat Reader | =7.0 | |
| Adobe Acrobat Reader | =7.0.1 | |
| Adobe Acrobat Reader | =7.0.2 | |
| Adobe Acrobat Reader | =7.0.3 | |
| Adobe Acrobat Reader | =7.0.4 | |
| Adobe Acrobat Reader | =7.0.5 | |
| Adobe Acrobat Reader | =7.0.6 | |
| Adobe Acrobat Reader | =7.0.7 | |
| Adobe Acrobat Reader | =7.0.8 | |
| Adobe Acrobat Reader | =7.0.9 | |
| Adobe Acrobat Reader | =7.1.0 | |
| Adobe Acrobat Reader | =7.1.1 | |
| Adobe Acrobat Reader | =7.1.2 | |
| Adobe Acrobat Reader | =7.1.3 | |
| Adobe Acrobat Reader | =8.0 | |
| Adobe Acrobat Reader | =8.1 | |
| Adobe Acrobat Reader | =8.1.1 | |
| Adobe Acrobat Reader | =8.1.2 | |
| Adobe Acrobat Reader | =8.1.4 | |
| Adobe Acrobat Reader | =8.1.5 | |
| Adobe Acrobat Reader | =8.1.6 | |
| Adobe Acrobat Reader | =8.1.7 | |
| Adobe Acrobat Reader | =9.0 | |
| Adobe Acrobat Reader | =9.1 | |
| Adobe Acrobat Reader | =9.1.1 | |
| Adobe Acrobat Reader | =9.1.2 | |
| Adobe Acrobat Reader | =9.1.3 | |
| Unix Unix |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.adobe.com/support/security/bulletins/apsb10-02.html
- http://www.securitytracker.com/id?1023446
- http://www.us-cert.gov/cas/techalerts/TA10-013A.html
- http://www.vupen.com/english/advisories/2010/0103
- http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
- http://www.securityfocus.com/bid/37759
- http://www.kb.cert.org/vuls/id/773545
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55556
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8455
- https://www.cve.org/CVERecord?id=CVE-2009-3958 https://nvd.nist.gov/vuln/detail/CVE-2009-3958
- https://bugzilla.redhat.com/show_bug.cgi?id=554293
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3958.json
- collector/nvd-historical
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-cve
- source/Red Hat
- agent/severity
- agent/references
- agent/remedy
- agent/weakness
- agent/author
- agent/description
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/adobe
- canonical/adobe acrobat reader
- version/adobe acrobat reader/9.2
- version/adobe acrobat reader/3.0
- version/adobe acrobat reader/3.1
- version/adobe acrobat reader/4.0
- version/adobe acrobat reader/4.0.5
- version/adobe acrobat reader/4.0.5a
- version/adobe acrobat reader/4.0.5c
- version/adobe acrobat reader/5.0
- version/adobe acrobat reader/5.0.5
- version/adobe acrobat reader/5.0.6
- version/adobe acrobat reader/5.0.10
- version/adobe acrobat reader/6.0
- version/adobe acrobat reader/6.0.1
- version/adobe acrobat reader/6.0.2
- version/adobe acrobat reader/6.0.3
- version/adobe acrobat reader/6.0.4
- version/adobe acrobat reader/6.0.5
- version/adobe acrobat reader/6.0.6
- version/adobe acrobat reader/7.0
- version/adobe acrobat reader/7.0.1
- version/adobe acrobat reader/7.0.2
- version/adobe acrobat reader/7.0.3
- version/adobe acrobat reader/7.0.4
- version/adobe acrobat reader/7.0.5
- version/adobe acrobat reader/7.0.6
- version/adobe acrobat reader/7.0.7
- version/adobe acrobat reader/7.0.8
- version/adobe acrobat reader/7.0.9
- version/adobe acrobat reader/7.1.0
- version/adobe acrobat reader/7.1.1
- version/adobe acrobat reader/7.1.2
- version/adobe acrobat reader/7.1.3
- version/adobe acrobat reader/7.1.4
- version/adobe acrobat reader/8.0
- version/adobe acrobat reader/8.1
- version/adobe acrobat reader/8.1.1
- version/adobe acrobat reader/8.1.2
- version/adobe acrobat reader/8.1.3
- version/adobe acrobat reader/8.1.4
- version/adobe acrobat reader/8.1.5
- version/adobe acrobat reader/8.1.6
- version/adobe acrobat reader/8.1.7
- version/adobe acrobat reader/9.0
- version/adobe acrobat reader/9.1
- version/adobe acrobat reader/9.1.1
- version/adobe acrobat reader/9.1.2
- version/adobe acrobat reader/9.1.3
- vendor/apple
- canonical/apple mac os x
- vendor/microsoft
- canonical/microsoft windows
- version/adobe acrobat reader/3.01
- version/adobe acrobat reader/3.02
- version/adobe acrobat reader/4.5
- version/adobe acrobat reader/5.0.7
- version/adobe acrobat reader/5.0.9
- version/adobe acrobat reader/5.0.11
- version/adobe acrobat reader/5.1
- vendor/unix
- canonical/unix unix