جزئیات آسیب‌پذیری

The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.

• http://www.metasploit.com/modules/exploit/windows/fileformat/adobe_u3d_meshdecl x_refsource_MISC
• http://secunia.com/advisories/38138 third-party-advisoryx_refsource_SECUNIA
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8242 vdb-entrysignaturex_refsource_OVAL
• http://www.adobe.com/support/security/bulletins/apsb10-02.html x_refsource_CONFIRM
• http://www.redhat.com/support/errata/RHSA-2010-0060.html vendor-advisoryx_refsource_REDHAT
• http://www.vupen.com/english/advisories/2010/0103 vdb-entryx_refsource_VUPEN
• http://www.securitytracker.com/id?1023446 vdb-entryx_refsource_SECTRACK
• http://osvdb.org/61690 vdb-entryx_refsource_OSVDB
• https://bugzilla.redhat.com/show_bug.cgi?id=554293 x_refsource_CONFIRM
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55551 vdb-entryx_refsource_XF
• http://secunia.com/advisories/38215 third-party-advisoryx_refsource_SECUNIA
• http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html vendor-advisoryx_refsource_SUSE
• http://www.us-cert.gov/cas/techalerts/TA10-013A.html third-party-advisoryx_refsource_CERT
• http://www.securityfocus.com/bid/37758 vdb-entryx_refsource_BID
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-3953 government-resource