NVD

Id
51115  
Name
CVE-2009-3956  
Description
The default configuration of Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, does not enable the Enhanced Security feature, which has unspecified impact and attack vectors, related to a "script injection vulnerability," as demonstrated by Acrobat Forms Data Format (FDF) behavior that allows cross-site scripting (XSS) by user-assisted remote attackers.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-01-13  
Modified Date
2010-08-21  
Seq
2009-3956  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259024 51115 CVE-2009-3956 SUSE-SA:2010:008  View
259025 51115 CVE-2009-3956 oval:org.mitre.oval:def:8327  View
259026 51115 CVE-2009-3956 http://www.adobe.com/support/security/bulletins/apsb10-02.html  View
259027 51115 CVE-2009-3956 http://www.packetstormsecurity.org/1001-exploits/SS-2010-001.txt  View
259028 51115 CVE-2009-3956 RHSA-2010:0060  View
259029 51115 CVE-2009-3956 37763  View
259030 51115 CVE-2009-3956 1023446  View
259031 51115 CVE-2009-3956 http://www.stratsec.net/files/SS-2010-001_Stratsec_Acrobat_Script_Injection_Security_Advisory_v1.0.pdf  View
259032 51115 CVE-2009-3956 TA10-013A  View
259033 51115 CVE-2009-3956 ADV-2010-0103  View
259034 51115 CVE-2009-3956 acrobat-reader-unspec-xss(55554)  View
259035 51115 CVE-2009-3956 https://bugzilla.redhat.com/show_bug.cgi?id=554296  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35237 JVNDB-2010-001017 Adobe Reader および Acrobat におけるスクリプトインジェクションの脆弱性に関連した脆弱性 Microsoft Windows および Apple Mac OS X 上で稼動する Adobe Reader および Acrobat のデフォルト設定には、拡張セキュリティ機能を適切にサポートしないため、スクリプトインジェクションの脆弱性に関連した影響および攻撃の脆弱性が存在します。 CVE-2009-3956 41387 CVE-2009-3956 51115 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001017.html 2010-01-12 2010-02-10 View