← Back to CVEs

CVE-2009-4324

HIGHCISA KEV

7.8

Description

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published12/15/2009

Last Modified4/21/2026

Sourcekev

Honeypot Sightings0

CISA KEV

VendorAdobe

ProductAcrobat and Reader

Vulnerability NameAdobe Acrobat and Reader Use-After-Free Vulnerability

KEV Date Added2022-06-08

Remediation Due Date2022-06-22

Ransomware UseUnknown

Affected Products

adobe:acrobatadobe:acrobat_readerapple:mac_os_xmicrosoft:windowsopensuse:opensusesuse:linux_enterprisesuse:linux_enterprise_debuginfo

Weaknesses (CWE)

CWE-416CWE-416

References

http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html(psirt@adobe.com)

http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html(psirt@adobe.com)

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html(psirt@adobe.com)

http://osvdb.org/60980(psirt@adobe.com)

http://secunia.com/advisories/37690(psirt@adobe.com)

http://secunia.com/advisories/38138(psirt@adobe.com)

http://secunia.com/advisories/38215(psirt@adobe.com)

http://www.adobe.com/support/security/advisories/apsa09-07.html(psirt@adobe.com)

http://www.adobe.com/support/security/bulletins/apsb10-02.html(psirt@adobe.com)

http://www.kb.cert.org/vuls/id/508357(psirt@adobe.com)

http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb(psirt@adobe.com)

http://www.redhat.com/support/errata/RHSA-2010-0060.html(psirt@adobe.com)

http://www.securityfocus.com/bid/37331(psirt@adobe.com)

http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214(psirt@adobe.com)

http://www.symantec.com/connect/blogs/zero-day-xmas-present(psirt@adobe.com)

http://www.us-cert.gov/cas/techalerts/TA10-013A.html(psirt@adobe.com)

http://www.vupen.com/english/advisories/2009/3518(psirt@adobe.com)

http://www.vupen.com/english/advisories/2010/0103(psirt@adobe.com)

https://bugzilla.redhat.com/show_bug.cgi?id=547799(psirt@adobe.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/54747(psirt@adobe.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795(psirt@adobe.com)

http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html(af854a3a-2127-422b-91ae-364da2661108)

http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html(af854a3a-2127-422b-91ae-364da2661108)

http://osvdb.org/60980(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/37690(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/38138(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/38215(af854a3a-2127-422b-91ae-364da2661108)

http://www.adobe.com/support/security/advisories/apsa09-07.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.adobe.com/support/security/bulletins/apsb10-02.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/508357(af854a3a-2127-422b-91ae-364da2661108)

http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2010-0060.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/37331(af854a3a-2127-422b-91ae-364da2661108)

http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214(af854a3a-2127-422b-91ae-364da2661108)

http://www.symantec.com/connect/blogs/zero-day-xmas-present(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA10-013A.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2009/3518(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/0103(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=547799(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/54747(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-4324(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.