CVE-2009-4324
High 7.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Adobe Acrobat and Reader Use-After-Free Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.
Metrics
- CVSS 3.1
-
7.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 82% (percentile: 100) as of 1 November 2026
- CWE
- CWE-416
Affected products
adobe: acrobat; adobe: acrobat reader; apple: mac os x; microsoft: windows; suse: linux enterprise debuginfo; opensuse: opensuse; suse: linux enterprise
References
- http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html Broken LinkVendor Advisory
- http://secunia.com/advisories/37690 Broken LinkVendor Advisory
- http://secunia.com/advisories/38138 Broken LinkVendor Advisory
- http://secunia.com/advisories/38215 Broken LinkVendor Advisory
- http://www.adobe.com/support/security/advisories/apsa09-07.html Vendor Advisory
- http://www.vupen.com/english/advisories/2009/3518 Broken LinkVendor Advisory
- http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html Broken LinkVendor Advisory
- http://secunia.com/advisories/37690 Broken LinkVendor Advisory
- http://secunia.com/advisories/38138 Broken LinkVendor Advisory
- http://secunia.com/advisories/38215 Broken LinkVendor Advisory