CVE-2009-1862
Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.
Required action
For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2009-1862
Description
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
Severity
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HAffected Products
| Vendor | Product | Affected versions |
|---|---|---|
| - | - | n/a |
References
20 Links- http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99
- http://support.apple.com/kb/HT3864
- http://isc.sans.org/diary.html?storyid=6847
- http://www.adobe.com/support/security/bulletins/apsb09-13.html
- http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html
- http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability
- http://bugs.adobe.com/jira/browse/FP-1265
- http://www.adobe.com/support/security/bulletins/apsb09-10.html
- http://support.apple.com/kb/HT3865
- http://www.adobe.com/support/security/advisories/apsa09-03.html
- http://news.cnet.com/8301-27080_3-10293389-245.html
Record Details
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.