CVE-2009-1862KEV · OVERDUE

Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

High · published July 23, 2009

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 97.6th percentile for exploit probability.

1584
days past CISA
deadline
CVSS v3.1
7.8
EPSS
21%
Percentile
97.6
In the wild
Confirmed
What it is

🚨 An unspecified vulnerability lurking in Adobe Reader, Acrobat, and Flash Player can let attackers execute any code they choose! 🔥 Think of it like a magician slipping a sneaky trick into your favorite show — while you're entertained, they could be pulling off a heist right under your nose! 🎩 This vulnerability could allow an attacker to crash your system or, even worse, run malicious code that could compromise your data or exploit sensitive information. Imagine your computer being hijacked during a simple PDF review — absolutely devastating!

Put simply

Think of it like a magician slipping a sneaky trick into your favorite show — while you're entertained, they could be pulling off a heist right under your nose! 🎩 This flaw relates to a memory corruption issue via crafted Flash applications embedded in .pdf files or .swf files, specifically in authplay.dll, making it possible for an attacker to trigger remote code execution or a denial of service.

What to do

This vulnerability could allow an attacker to crash your system or, even worse, run malicious code that could compromise your data or exploit sensitive information. Imagine your computer being hijacked during a simple PDF review — absolutely devastating! To keep your systems secure, patch Adobe Reader and Acrobat to version 9.1.3 or later, and update Flash Player to the latest version. It's critical to verify your installations and ensure you're only using safe files from trusted sources. You've got this! With these updates, you're stepping up as a true security hero and locking down your defenses! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.21198 · 97.6th percentile
Published
2009-07-23T20:00Z
KEV added
2022-06-08 · due 2022-06-22
EPSS history
Timeline
  • 08 JUN 00:00Z
    Added to CISA KEV — remediate by Jun 22
    kev
  • 23 JUL 20:00Z
    Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows…
    cvelistv5