Patchwire CVEs, their patch status, and feeds to follow them

CVE-2009-3459

Fixed in a distro release ExploitedEPSS 87%CVSS 8.8

Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption, as exploited in the wild in October 2009. NOTE: some of these details are obtained from third party information.

Published 2009-10-13 · In CISA KEV since 2026-05-20 · CVE record · OSV

Products: adobe acrobat, adobe acrobat_reader

Distro releases

ReleasePackageFixed in
Red Hat rhel extras 3acroread0:8.1.7-1
Red Hat rhel extras 3acroread-plugin0:8.1.7-1
Red Hat rhel extras 4acroread0:8.1.7-1.el4
Red Hat rhel extras 4acroread-plugin0:8.1.7-1.el4
Red Hat rhel extras 5acroread0:8.1.7-1.el5
Red Hat rhel extras 5acroread-plugin0:8.1.7-1.el5