CVE		CVE-2009-3959
Status		Candidate
Description		Integer overflow in the U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a malformed PDF document.
Severity		High
CVSS score		10
CVSS vector		(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Phase		Assigned (21.08.2010)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3959
References		BID : 37756
		BUGTRAQ : 20100115 VUPEN Security Research - Adobe Acrobat and Reader U3D Integer Overflow Vulnerability
		CERT : TA10-013A
		CONFIRM : http://www.adobe.com/support/security/bulletins/ap...
		CONFIRM : https://bugzilla.redhat.com/show_bug.cgi?id=554293
		OVAL : oval:org.mitre.oval:def:8539
		REDHAT : RHSA-2010:0060
		SECTRACK : 1023446
		SECUNIA : 38138
		SECUNIA : 38215
		SUSE : SUSE-SA:2010:008
		VUPEN : ADV-2010-0103
		XF : acrobat-reader-u3dsupport-code-exec(55557)
SecurityVulns:		Adobe Acrobat and Reader multiple security vulnerabilities