CVE-2009-3930

CVE-2009-3930 is a critical-severity vulnerability in Christos Zoulas File with a CVSS 2.0 base score of 9.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-189.

Key facts

• Severity: Critical (CVSS 2.0 base score 9.3)
• EPSS exploit prediction: 2% (76th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-189
• Affected product: Christos Zoulas File
• Published: 2009-11-10
• Last modified: 2026-06-16

Description

Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.

Frequently asked questions

What is CVE-2009-3930?

Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.

How severe is CVE-2009-3930?

CVE-2009-3930 has a CVSS 2.0 base score of 9.3, rated critical severity.

Is CVE-2009-3930 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (76th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2009-3930?

CVE-2009-3930 primarily affects Christos Zoulas File. In total, 35 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2009-3930?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2009-3930 published?

CVE-2009-3930 was published on 2009-11-10 and last updated on 2026-06-16.

References

• http://mx.gw.com/pipermail/file/2009/000382.html
• http://www.securityfocus.com/bid/37074

Affected products (35)

• cpe:2.3:a:christos_zoulas:file:*:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.30:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.31:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.32:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.33:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.34:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.36:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.37:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.38:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.39:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.40:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:3.41:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.01:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.02:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.03:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.04:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.06:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.07:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.08:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.09:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.11:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.12:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.13:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.14:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.15:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.16:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.17:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.19:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.20:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.21:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.23:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.24:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.25:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:4.26:*:*:*:*:*:*:*
• cpe:2.3:a:christos_zoulas:file:5.00:*:*:*:*:*:*:*

More vulnerabilities in Christos Zoulas File

• CVE-2009-1515 — Medium (CVSS 6.8): Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted…
• CVE-2014-3478 — Medium (CVSS 6.5): Buffer overflow in the mconvert function in softmagic.c in file before 5.19, as used in the Fileinfo component in PHP…
• CVE-2014-0207 — Medium (CVSS 6.5): The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30…
• CVE-2012-1571 — Medium (CVSS 6.5): file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite…
• CVE-2014-3538 — Medium (CVSS 5.0): file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote…
• CVE-2013-7345 — Medium (CVSS 5.0): The BEGIN regular expression in the awk script detector in magic/Magdir/commands in file before 5.15 uses multiple…

All CVEs affecting Christos Zoulas File →

Other CWE-189 (Numeric Errors) vulnerabilities

• CVE-2015-8396 — Critical (CVSS 10.0): Integer overflow in the ImageRegionReader::ReadIntoBuffer function in…
• CVE-2015-7205 — Critical (CVSS 10.0): Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x…
• CVE-2015-6575 — Critical (CVSS 10.0): SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which…
• CVE-2015-3864 — Critical (CVSS 10.0): Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in…
• CVE-2015-3836 — Critical (CVSS 10.0): The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1…
• CVE-2015-3834 — Critical (CVSS 10.0): Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android…

Browse all CWE-189 (Numeric Errors) vulnerabilities →