CVE-2009-4764

Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attackers to trick users…

published April 5, 2010

CVSS
—
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

🚨 Watch out! Adobe Reader can unwittingly execute EXE files nestled inside PDF documents, transforming your innocuous reads into potential code-execution traps! ⚡ Think of it like a seemingly harmless gift package that arrives at your doorstep, but inside, it’s a booby trap waiting to spring! This vulnerability allows attackers to embed dangerous surprises within PDFs, catching users off guard. If exploited, an attacker could trick users into executing arbitrary code, opening the door to all sorts of havoc — from data theft to system takeover. It's like inviting a perfect stranger into your home who then helps themselves to your valuables and snacks!

Put simply

Think of it like a seemingly harmless gift package that arrives at your doorstep, but inside, it’s a booby trap waiting to spring! This vulnerability allows attackers to embed dangerous surprises within PDFs, catching users off guard. This vulnerability in Adobe Reader versions 8.x and 9.x on Windows allows embedded EXE files in PDFs to be executed, thereby enabling attackers to run malicious code under the user's context without their consent.

What to do

If exploited, an attacker could trick users into executing arbitrary code, opening the door to all sorts of havoc — from data theft to system takeover. It's like inviting a perfect stranger into your home who then helps themselves to your valuables and snacks! To protect yourself, consider upgrading Adobe Reader to the latest version available, where this issue is addressed. Also, exercise caution when opening PDFs from unknown sources, and ensure your antivirus software is up to date as an additional line of defense. 🛡️ You've got this! Stay vigilant and keep your software updated to stay ahead of the game. 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03520 · 89.2th percentile
Published
2010-04-05T15:15Z
EPSS history
Timeline
  • 05 APR 15:15Z
    Adobe Reader 8.x and 9.x on Windows is able to execute EXE files that are embedded in a PDF document, which makes it easier for remote attackers to trick users…
    cvelistv5