CVE-2009-1862highunder attackCWE-787

CVE-2009-1862

Published · Updated

Follow this CVE+ Monitor Adobe Acrobat+ Monitor Flash Player

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

56Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.8epss 21%
from disclosure to weapon
Published on NVDJul 23
CISA KEV+4703d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
10 products
Red Hat Desktop version 3 Extras · Red Hat Desktop version 4 Extras · Red Hat Enterprise Linux AS version 3 Extras · Red Hat Enterprise Linux AS version 4 Extras · Red Hat Enterprise Linux Desktop Supplementary (v. 5) · and others 5
fix ↗
Action required by CISAfederal deadline: 2022-06-22

For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.

In short

Adobe Reader, Acrobat, and Flash Player contain a memory corruption vulnerability that allows attackers to run malicious code or crash the application by opening specially crafted PDF or Flash files. This flaw was actively exploited in the wild during July 2009.

Technical detail

CWE-787 (out-of-bounds write) in authplay.dll affects Adobe Reader/Acrobat 9.0–9.1.2 and Flash Player 9.0–9.0.159.0 and 10.0–10.0.22.87. Remote attackers can trigger memory corruption through malicious Flash content embedded in PDFs or standalone .swf files, leading to arbitrary code execution or denial of service.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a