VulnerabilityModified

CVE-2009-3958

Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote…

HIGH 10.0EPSS 52.6%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 52.6%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 52.59% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: adobe/acrobat · adobe/acrobat reader
Source: psirt@adobe.com

References

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
http://www.adobe.com/support/security/bulletins/apsb10-02.htmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/773545US Government Resource
http://www.securityfocus.com/bid/37759
http://www.securitytracker.com/id?1023446
http://www.us-cert.gov/cas/techalerts/TA10-013A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2010/0103Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55556
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8455
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
http://www.adobe.com/support/security/bulletins/apsb10-02.htmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/773545US Government Resource
http://www.securityfocus.com/bid/37759
http://www.securitytracker.com/id?1023446
http://www.us-cert.gov/cas/techalerts/TA10-013A.htmlUS Government Resource
http://www.vupen.com/english/advisories/2010/0103Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55556
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8455

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.