CVE-2009-3930
published 2009-11-10CVE-2009-3930: Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound…
PriorityP433critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
1.80%
76.0th percentile
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
Affected
40 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| christos_zoulas | file | <= 5.01 | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
| christos_zoulas | file | — | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv9.3CRITICAL
vendor_debian9.3CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-462f-9822-gvw7: Multiple integer overflows in Christos Zoulas file before 5
ghsa_unreviewed·2022-05-02
CVE-2009-3930 [HIGH] GHSA-462f-9822-gvw7: Multiple integer overflows in Christos Zoulas file before 5
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
OSV
CVE-2009-3930: Multiple integer overflows in Christos Zoulas file before 5
osv·2009-11-10·CVSS 9.3
CVE-2009-3930 [CRITICAL] CVE-2009-3930: Multiple integer overflows in Christos Zoulas file before 5
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
Debian
CVE-2009-3930: file - Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assist...
vendor_debian·2009·CVSS 9.3
CVE-2009-3930 [CRITICAL] CVE-2009-3930: file - Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assist...
Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
Scope: local
bookworm: resolved (fixed in 5.03-1)
bullseye: resolved (fixed in 5.03-1)
forky: resolved (fixed in 5.03-1)
sid: resolved (fixed in 5.03-1)
trixie: resolved (fixed in 5.03-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2009-11-10
Published