CVE-2009-1857

Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a…

published June 11, 2009

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

⚠️ A crafted PDF with a sneaky TrueType font could crash your Adobe Reader and leave you in a lurch! Think of it like a restaurant serving a dish that looks delicious but spoils your appetite — one faulty ingredient can ruin the whole meal! In this case, the faulty ingredient is that TrueType font that causes memory corruption. If exploited, this vulnerability can lead to a denial of service, meaning your Adobe Reader may crash and become unusable. In the worst-case scenario, it could allow an attacker to execute arbitrary code, opening the door to further exploits or data breaches. Yikes!

Put simply

Think of it like a restaurant serving a dish that looks delicious but spoils your appetite — one faulty ingredient can ruin the whole meal! In this case, the faulty ingredient is that TrueType font that causes memory corruption. This vulnerability exists in Adobe Reader and Acrobat versions prior to 7.1.3, 8.1.6, and 9.1.2, allowing crafted PDF documents to corrupt memory due to mishandled TrueType fonts, potentially leading to crashes or unauthorized code execution.

What to do

If exploited, this vulnerability can lead to a denial of service, meaning your Adobe Reader may crash and become unusable. In the worst-case scenario, it could allow an attacker to execute arbitrary code, opening the door to further exploits or data breaches. Yikes! To safeguard your system, update to Adobe Reader and Acrobat versions 7.1.3, 8.1.6, or 9.1.2 or later. Regularly check for updates and ensure your software remains current to mitigate risks associated with vulnerabilities like this one. You've got this! Stay vigilant by keeping your software updated and you'll keep those nasty vulnerabilities at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07155 · 94.3th percentile
Published
2009-06-11T15:00Z
EPSS history
Timeline
  • 11 JUN 15:00Z
    Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a…
    cvelistv5