CVE-2009-1862 Adobe Acrobat and Reader, Flash Player Unspecified

What is CVE-2009-1862?

CVE-2009-1862 is a high-severity memory corruption vulnerability in Adobe Acrobat, published on 23 Jul 2009. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.

Weakness: CWE-787

Which versions are affected by CVE-2009-1862?

It affects 3 products.

Products include Adobe Acrobat, Adobe Acrobat Reader, Adobe Flash Player.

How do I fix CVE-2009-1862?

Apply the vendor's patch. US federal agencies must fix it by 22 Jun 2022.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2009-1862 being exploited?

Yes. Attackers have exploited CVE-2009-1862 in the wild since at least 8 Jun 2022.

Other vulnerabilities in Adobe Acrobat

• CVE-2021-28550 Adobe Acrobat and Reader Use-After-Free Exploited Critical 9.6
• CVE-2021-21017 Adobe Acrobat and Reader Heap-based Buffer Overflow Exploited High 8.8
• CVE-2014-0546 Adobe Reader and Acrobat Sandbox Bypass Exploited High 8.8
• CVE-2014-0496 Adobe Reader and Acrobat Use-After-Free Exploited High 8.8
• CVE-2013-3346 Adobe Reader and Acrobat Memory Corruption Exploited High 8.8

All Adobe Acrobat vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as CVE-2009-2580, GHSA-wx6p-35hf-vhhj.