CVE-2009-4324

critical-risk
Published 2009-12-15

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

Do I need to act?

!
92.9% chance of exploitation in next 30 days
EPSS score — higher than 7% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
3 public exploits available
16503, 16623, 10618
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (7)

Affected Vendors

Adobe Opensuse Suse

References (43)

Broken Link http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html
Exploit http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html
Broken Link http://osvdb.org/60980
Broken Link http://secunia.com/advisories/37690
Broken Link http://secunia.com/advisories/38138
Broken Link http://secunia.com/advisories/38215
Vendor Advisory http://www.adobe.com/support/security/advisories/apsa09-07.html
Not Applicable http://www.adobe.com/support/security/bulletins/apsb10-02.html
Third Party Advisory http://www.kb.cert.org/vuls/id/508357
Broken Link http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/e...
Broken Link http://www.redhat.com/support/errata/RHSA-2010-0060.html
Broken Link http://www.securityfocus.com/bid/37331
Broken Link http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214
Broken Link http://www.symantec.com/connect/blogs/zero-day-xmas-present
Third Party Advisory http://www.us-cert.gov/cas/techalerts/TA10-013A.html
Broken Link http://www.vupen.com/english/advisories/2009/3518
Broken Link http://www.vupen.com/english/advisories/2010/0103
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=547799
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/54747
and 23 more references
72
/ 100
critical-risk
Severity 24/34 · High
Exploitability 34/34 · Critical
Exposure 14/34 · Moderate