CVE-2009-3958

Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader…

published January 13, 2010

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
53%
Percentile
99.0
In the wild
Unconfirmed
What it is

⚠️ Multiple stack-based buffer overflows lurk within the NOS Microsystems getPlus Helper ActiveX control — a well-meaning courier who could accidentally drop off a package that allows attackers to execute arbitrary code. 🛠️ Think of it like a restaurant forgetting to check if a delivery is safe before bringing it into the kitchen. If the chef isn't careful, they might unknowingly serve a dangerous dish to all the patrons! In this scenario, a crafty attacker might exploit the oversights to run malicious code on a user's system, leading to anything from unauthorized data access to complete system compromise. While the severity here is marked as 'unknown,' potential fallout could still be serious, especially for systems running vulnerable versions of Adobe Reader and Acrobat.

Put simply

Think of it like a restaurant forgetting to check if a delivery is safe before bringing it into the kitchen. If the chef isn't careful, they might unknowingly serve a dangerous dish to all the patrons! This vulnerability stems from stack-based buffer overflows in the getPlus Helper ActiveX control before version 1.6.2.49. Attackers can exploit these vulnerabilities by manipulating unspecified initialization parameters, allowing them to execute arbitrary code remotely.

What to do

In this scenario, a crafty attacker might exploit the oversights to run malicious code on a user's system, leading to anything from unauthorized data access to complete system compromise. While the severity here is marked as 'unknown,' potential fallout could still be serious, especially for systems running vulnerable versions of Adobe Reader and Acrobat. To mitigate this risk, ensure you update Adobe Reader and Acrobat to the latest versions (9.3 for 9.x and 8.2 for 8.x) and review settings for ActiveX controls to minimize exposure. If you're using affected components, consider disabling or removing them if not essential. You've got this! With a few updates and checks, you can keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.52586 · 99.0th percentile
Published
2010-01-13T19:00Z
EPSS history
Timeline
  • 13 JAN 19:00Z
    Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download Manager in Adobe Reader…
    cvelistv5