EXPOSURES › CVE-2009-3459
CVE-2009-3459
HIGH ⌖ ON CISA KEV · EXPLOITEDAdobe Acrobat and Reader exploited a heap-based buffer overflow vulnerability allowing remote code execution via crafted PDF files.
This vulnerability enabled remote attackers to execute arbitrary code through crafted PDF files, posing a significant risk to DIB organizations using Adobe products on unpatched systems. The vulnerability was actively exploited in the wild, requiring immediate patching to prevent potential compromise of sensitive systems.
Shame score — The vulnerability was actively exploited in the wild and required prompt remediation, indicating a failure to maintain security posture on widely used products.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption.
| PRODUCT | STATUS |
|---|---|
| Adobe Acrobat Sign for Government Adobe |
Authorized |
| Adobe Analytics Adobe |
Authorized |
| Adobe Campaign Adobe |
Authorized |
| Adobe Connect Managed Services (ACMS-GC) Adobe |
Authorized |
| Adobe Creative Cloud for Enterprise Adobe |
Authorized |
| Adobe Document Cloud (PDF Services & Adobe Sign) Adobe |
Authorized |
| Adobe Experience Manager Managed Services (AEMMS-GC) Adobe |
Authorized |
| Adobe Learning Manager Adobe |
Authorized |