CVE-2009-3459
High · 8.8 CISA KEVCVSS
8.8
EPSS
86.6%
Published
Oct 13, 2009
CISA due date
Jun 3, 2026
The record
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:3 | acroread | 0 | 0:8.1.7-1 |
| Red Hat:rhel_extras:3 | acroread-plugin | 0 | 0:8.1.7-1 |
| Red Hat:rhel_extras:4 | acroread | 0 | 0:8.1.7-1.el4 |
| Red Hat:rhel_extras:4 | acroread-plugin | 0 | 0:8.1.7-1.el4 |
| Red Hat:rhel_extras:5::client | acroread | 0 | 0:8.1.7-1.el5 |
| Red Hat:rhel_extras:5::client | acroread-plugin | 0 | 0:8.1.7-1.el5 |
| Red Hat:rhel_extras:5::server | acroread | 0 | 0:8.1.7-1.el5 |
| Red Hat:rhel_extras:5::server | acroread-plugin | 0 | 0:8.1.7-1.el5 |
Related vulnerabilities
- CVE-2009-2994 Buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x… Also affects acroread
- CVE-2009-2983 Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4… Also affects acroread
- CVE-2009-2990 Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and… Also affects acroread
- CVE-2009-2998 Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not… Also affects acroread
- CVE-2009-3458 Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not… Also affects acroread
- CVE-2009-3431 Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and… Also affects acroread
- CVE-2009-1855 Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8… Also affects acroread
- CVE-2009-0511 Heap-based buffer overflow in the JBIG2 filter in Adobe Reader 7 and Acrobat 7 before… Also affects acroread