CVE-2009-3953

A vulnerability in Adobe Acrobat and Reader allowed attackers to execute code remotely via malicious 3D files, actively exploited in the wild and impacting DIB organizations reliant on these tools for document handling.

CVE-2009-3953, an array boundary issue in Adobe Acrobat and Reader's Universal 3D support, enabled remote code execution. DIB organizations using these products are at risk of malware infection and data compromise, potentially impacting CMMC compliance. Immediate patching and user awareness training are crucial.

Shame score — The vulnerability's age and active exploitation despite Adobe's prominent position highlights a pattern of negligent security practices.