Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-4324
HistoryDec 15, 2009 - 2:30 a.m.

CVE-2009-4324

2009-12-1502:30:00
CWE-416
[email protected]
web.nvd.nist.gov
5

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

Low

EPSS

0.97

Percentile

99.8%

JSON

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

Affected configurations

Nvd
Node
adobeacrobatRange8.0–8.2
OR
adobeacrobatRange9.0–9.3
OR
adobeacrobat_readerRange8.0–8.2
OR
adobeacrobat_readerRange9.0–9.3
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
suselinux_enterprise_debuginfoMatch11-
OR
opensuseopensuseMatch11.1
OR
opensuseopensuseMatch11.2
OR
suselinux_enterpriseMatch10.0sp2
OR
suselinux_enterpriseMatch10.0sp3

References

Related

openvas 8
seebug 4
prion 1
cvelist 1
packetstorm 3
ubuntucve 1
checkpoint_advisories 3
saint 4
attackerkb 1
metasploit 2
canvas 1
threatpost 3
exploitpack 1
cert 1
cisa_kev 1
cve 1
exploitdb 3
redhat 3
nessus 15
securityvulns 2
suse 1
gentoo 1
openvas
openvas
Adobe Reader/Acrobat Multimedia Doc.media.newPlayer Code Execution Vulnerability - Windows
2009-12-21 00:00:00
Adobe Reader Multimeda Doc.media.newPlayer RCE Vulnerability - Linux
2009-12-21 00:00:00
Adobe Reader Multiple Vulnerabilities (Jan 2010) - Linux
2010-01-16 00:00:00
seebug
seebug
Adobe Reader and Acrobat
2014-07-01 00:00:00
Adobe Reader and Acrobat (CVE-2009-4324) Exploit
2009-12-23 00:00:00
Adobe Reader/Acrobat 'newplayer()' JavaScript方法远程代码执行漏洞
2009-12-17 00:00:00
prion
prion
Design/Logic Flaw
2009-12-15 02:30:00
cvelist
cvelist
CVE-2009-4324
2009-12-15 02:00:00
packetstorm
packetstorm
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-31 00:00:00
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-31 00:00:00
Adobe Reader / Acrobat Use-After-Free Calc.exe
2009-12-22 00:00:00
ubuntucve
ubuntucve
CVE-2009-4324
2009-12-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Reader and Acrobat media.newPlayer Code Execution - Ver2 (CVE-2009-4324)
2014-03-03 00:00:00
Protection against Adobe Reader and Acrobat Doc.media.newPlayer Memory Corruption Vulnerability (APSA09-07)
2009-12-16 00:00:00
Adobe Reader and Acrobat media.newPlayer Code Execution (CVE-2009-4324)
2010-01-31 00:00:00
saint
saint
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
Adobe Reader media.newPlayer Use-After-Free Code Execution
2009-12-23 00:00:00
attackerkb
attackerkb
CVE-2009-4324
2009-12-15 00:00:00
metasploit
metasploit
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-16 20:37:57
Adobe Doc.media.newPlayer Use After Free Vulnerability
2009-12-15 20:15:08
canvas
canvas
Immunity Canvas: ACROBAT_NEWPLAYER
2009-12-15 02:30:00
threatpost
threatpost
Attackers Targeting Unpatched Adobe Flaws
2009-12-15 14:26:19
Main PHP-Nuke Site Compromised
2010-05-07 15:37:38
Adobe PDF Reader Gets Another Security Makeover
2010-01-13 15:57:31
exploitpack
exploitpack
Adobe Reader Acrobat - .PDF File Overflow
2009-12-23 00:00:00
cert
cert
Adobe Acrobat and Reader contain a use-after-free vulnerability in the JavaScript Doc.media.newPlayer method
2009-12-15 00:00:00
cisa_kev
cisa_kev
Adobe Acrobat and Reader Use-After-Free Vulnerability
2022-06-08 00:00:00
cve
cve
CVE-2009-4324
2009-12-15 02:30:00
exploitdb
exploitdb
Adobe Reader / Acrobat - '.PDF' File Overflow
2009-12-23 00:00:00
Adobe - 'Doc.media.newPlayer' Use-After-Free (Metasploit) (2)
2010-09-25 00:00:00
Adobe - 'Doc.media.newPlayer' Use-After-Free (Metasploit) (1)
2010-04-30 00:00:00
redhat
redhat
(RHSA-2010:0060) Critical: acroread security update
2010-01-20 00:00:00
(RHSA-2010:0038) Critical: acroread security update
2010-01-13 00:00:00
(RHSA-2010:0037) Critical: acroread security and bug fix update
2010-01-13 00:00:00
nessus
nessus
RHEL 3 : acroread (RHSA-2010:0060)
2013-01-24 00:00:00
RHEL 5 : acroread (RHSA-2010:0037)
2013-01-24 00:00:00
RHEL 4 : acroread (RHSA-2010:0038)
2013-01-24 00:00:00
securityvulns
securityvulns
Adobe Acrobat and Reader multiple security vulnerabilities
2010-03-15 00:00:00
Security updates available for Adobe Reader and Acrobat
2010-01-17 00:00:00
suse
suse
remote code execution in acroread
2010-01-26 16:40:23
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2010-09-07 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

Low

EPSS

0.97

Percentile

99.8%

JSON
Related for NVD:CVE-2009-4324
openvas8seebug4prion1cvelist1packetstorm3ubuntucve1checkpoint_advisories3saint4attackerkb1metasploit2canvas1threatpost3exploitpack1cert1cisa_kev1cve1exploitdb3redhat3nessus15securityvulns2suse1gentoo1