CVE-2009-3955

CVE-2009-3955 is a critical remote code execution vulnerability affecting Adobe Reader and Acrobat versions 9.x prior to 9.3 and 8.x prior to 8.2 on Windows and Mac OS X. Attackers can exploit this by crafting a malicious JPC_MS_RGN marker within a Jp2c stream, leading to an integer sign extension that bypasses security checks and causes memory corruption. This vulnerability carries a CVSS score of 10.0, indicating a severe risk with a network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity and potential impact, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.