← CVE Radar
CVE-2009-4324Adobe Acrobat and Reader Use-After-Free Vulnerability
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.
7.8 HIGHEPSS 81.88%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jun 22, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2009-4324
- Status
- Analyzed
- Assigner (CNA)
- adobe
- Published
- Dec 15, 2009
- Last modified
- 2026-06-16 23:13 UTC
Affected Products
From NVD CPE configurations.
adobeacrobat2 version ranges
- 8.0 before 8.2
- 9.0 before 9.3
adobeacrobat reader2 version ranges
- 8.0 before 8.2
- 9.0 before 9.3
suselinux enterprise debuginfo1 version range
- 11
opensuseopensuse2 version ranges
- 11.1
- 11.2
suselinux enterprise2 version ranges
- 10.0 sp2
- 10.0 sp3
References
- blogs.adobe.com http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html
- contagiodump.blogspot.com http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
- osvdb.org http://osvdb.org/60980
- secunia.com http://secunia.com/advisories/37690
- secunia.com http://secunia.com/advisories/38138
- secunia.com http://secunia.com/advisories/38215
- adobe.com http://www.adobe.com/support/security/advisories/apsa09-07.html
- adobe.com http://www.adobe.com/support/security/bulletins/apsb10-02.html
- kb.cert.org http://www.kb.cert.org/vuls/id/508357
- metasploit.com http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb
- redhat.com http://www.redhat.com/support/errata/RHSA-2010-0060.html
- securityfocus.com http://www.securityfocus.com/bid/37331
- shadowserver.org http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214
- symantec.com http://www.symantec.com/connect/blogs/zero-day-xmas-present
- us-cert.gov http://www.us-cert.gov/cas/techalerts/TA10-013A.html
- vupen.com http://www.vupen.com/english/advisories/2009/3518
- vupen.com http://www.vupen.com/english/advisories/2010/0103
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=547799
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/54747
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-4324