Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters.

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. (CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324)

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code. (CVE-2009-3953 / CVE-2009-3954 / CVE-2009-3955 / CVE-2009-3956 / CVE-2009-3957 / CVE-2009-3958 / CVE-2009-3959 / CVE-2009-4324)

Acrobat reader was updated to version 9.3 to fix those security issues.

Specially crafted PDF files could crash acroread. Attackers could exploit that to potentially execute arbitrary code (CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3956, CVE-2009-3957, CVE-2009-3958, CVE-2009-3959, CVE-2009-4324).

Acrobat reader was updated to version 9.3 to fix those security issues.

The version of Adobe Reader installed on the remote host is earlier than 9.3 / 8.2.  Such versions are reportedly affected by multiple vulnerabilities :

  - A use-after-free vulnerability in 'Multimedia.api' can     lead to code execution. (CVE-2009-4324)

  - An array boundary issue in 'U3D' support can lead to     code execution. (CVE-2009-3953)

  - A DLL-loading vulnerability in '3D' can allow arbitrary     code execution. (CVE-2009-3954)

  - A memory corruption vulnerability can lead to code     execution. (CVE-2009-3955)

  - A script injection vulnerability. (CVE-2009-3956)

  - A NULL pointer dereference vulnerability can lead to a     denial of service. (CVE-2009-3957)

  - A buffer overflow vulnerability in the Download Manager     can lead to code execution. (CVE-2009-3958)

  - An integer overflow vulnerability in 'U3D' support can     lead to code execution. (CVE-2009-3959)

  - A buffer overflow in the 'gp.ocx' ActiveX control can     lead to code execution. (CVE-2010-1278)

The version of Adobe Acrobat installed on the remote host is earlier than 9.3 / 8.2.  Such versions are reportedly affected by multiple vulnerabilities :

  - A use-after-free vulnerability in 'Multimedia.api' can     lead to code execution. (CVE-2009-4324)

  - An array boundary issue in 'U3D' support can lead to     code execution. (CVE-2009-3953)

  - A DLL-loading vulnerability in '3D' can allow arbitrary     code execution. (CVE-2009-3954)

  - A memory corruption vulnerability can lead to code     execution. (CVE-2009-3955)

  - A script injection vulnerability. (CVE-2009-3956)

  - A NULL pointer dereference vulnerability can lead to a     denial of service. (CVE-2009-3957)

  - A buffer overflow vulnerability in the Download Manager     can lead to code execution. (CVE-2009-3958)

  - An integer overflow vulnerability in 'U3D' support can     lead to code execution. (CVE-2009-3959)

  - A buffer overflow in the 'gp.ocx' ActiveX control can     lead to code execution. (CVE-2010-1278)

ID	Name	Product	Family	Severity
51711	SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6805)	Nessus	SuSE Local Security Checks	critical
51710	SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6804)	Nessus	SuSE Local Security Checks	critical
51696	SuSE 10 Security Update : acroread (ZYPP Patch Number 6803)	Nessus	SuSE Local Security Checks	critical
51695	SuSE 10 Security Update : acroread (ZYPP Patch Number 6802)	Nessus	SuSE Local Security Checks	critical
44377	SuSE 11 Security Update : acroread_ja (SAT Patch Number 1881)	Nessus	SuSE Local Security Checks	critical
44130	SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1850)	Nessus	SuSE Local Security Checks	critical
44128	openSUSE Security Update : acroread (acroread-1849)	Nessus	SuSE Local Security Checks	critical
44126	openSUSE Security Update : acroread (acroread-1849)	Nessus	SuSE Local Security Checks	critical
44124	openSUSE Security Update : acroread (acroread-1849)	Nessus	SuSE Local Security Checks	critical
43876	Adobe Reader < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)	Nessus	Windows	critical
43875	Adobe Acrobat < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)	Nessus	Windows	critical

Detections

Analytics

CVE-2009-3958

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical