CVE-2009-3930: Christos Zoulas File

High severity, CVSS 9.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.

Affected products

• Christos Zoulas File: up to and including 5.01; version 3.30 only; version 3.31 only; version 3.32 only; version 3.33 only; version 3.34 only; …

Published 2009-11-10. Last modified 2026-06-16.