« Volver al listado

CVE-2009-3952

Estado: ModificadaAlta (10)—

Buffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows attackers to execute arbitrary code via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Adobe — Illustrator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-3952",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@adobe.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-01-08T17:30:02.113",
  "references": [
    {
      "url": "http://www.adobe.com/support/security/bulletins/apsb10-01.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/37666",
      "tags": [
        "Patch"
      ],
      "source": "psirt@adobe.com"
    },
    {
      "url": "http://www.adobe.com/support/security/bulletins/apsb10-01.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/37666",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows attackers to execute arbitrary code via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en Adobe Illustrator CS3 v13.0.3 y anteriores e Illustrator CS4 v14.0.0 permite a atacantes remotos ejecutar código de su elección a através de vectores sin especificar"
    }
  ],
  "lastModified": "2026-06-16T23:12:41.500",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6EB4B3E-24B3-416F-9FD4-776FC311140E",
              "versionEndIncluding": "13.0.3"
            },
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:13.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1AF81AF-6584-46C7-80C7-D5737C22A5F6"
            },
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:13.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA14D604-E0D4-432B-BEE5-C8B48228C151"
            },
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:13.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F0BAEE7-5C1E-4620-87D7-786C2637F70D"
            },
            {
              "criteria": "cpe:2.3:a:adobe:illustrator:14.0.0:cs4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADE61071-583D-4E0B-BA63-F067ECCE0EC3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@adobe.com"
}