NetSight
IP …
critical10.0Public exploit code

CVE-2009-3958

Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow remote attackers to execute arbitrary code via unspecified initialization parameters.

Affected products

VendorProductAffected versions
AdobeAcrobat
through 9.2
Versions 3.0, 3.1, 4.0, 4.0.5, 4.0.5a
AdobeAcrobat Reader
through 9.2
Versions 3.0, 3.01, 3.02, 4.0, 4.0.5

Weakness classification

CWE-119

References