CVE-2009-4324
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA, has a working public exploit and 1 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Apply updates per vendor instructions.
Adobe Reader and Acrobat have a flaw where they try to use data that has already been freed from memory when handling multimedia in PDF files. An attacker can craft a malicious PDF to trigger this and run any code they want on your computer.
Use-after-free vulnerability in Doc.media.newPlayer method triggered by specially crafted PDF files with ZLib compressed streams. Attack requires user to open malicious PDF; vulnerability allows arbitrary code execution with user privileges. Affects Adobe Reader/Acrobat 8.x and 9.x on Windows and Mac OS X.
The full analysis of this CVE is available in Portuguese →