{"id":"CVE-2009-4324","aliases":["EUVD-2009-4292","GHSA-rv25-qx26-27xv","RHSA-2010:0037","RHSA-2010:0038","RHSA-2010:0060"],"status":"published","title":"Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader...","description":"Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.8188,"percentile":0.99652,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-399","CWE-416"],"published":"2009-12-15T02:00:00Z","modified":"2026-06-29T10:02:57Z","kev":{"date_added":"2022-06-08","due_date":"2022-06-22","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-06-08"},{"source":"kev","since":"2022-06-08"}],"exploits":[{"source":"metasploit","id":"exploit/windows/browser/adobe_media_newplayer","title":"Adobe Doc.media.newPlayer Use After Free Vulnerability","type":"exploit","platform":"Windows","date":"2009-12-14","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/browser/adobe_media_newplayer"},{"source":"metasploit","id":"exploit/windows/fileformat/adobe_media_newplayer","title":"Adobe Doc.media.newPlayer Use After Free Vulnerability","type":"exploit","platform":"Windows","date":"2009-12-14","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/fileformat/adobe_media_newplayer"},{"source":"exploitdb","id":"EDB-10618","title":"Adobe Reader / Acrobat - '.PDF' File Overflow","type":"local","platform":"windows","date":"2009-12-23","verified":true,"url":"https://www.exploit-db.com/exploits/10618"},{"source":"exploitdb","id":"EDB-16503","title":"Adobe - 'Doc.media.newPlayer' Use-After-Free (Metasploit) (1)","type":"local","platform":"windows","date":"2010-04-30","verified":true,"url":"https://www.exploit-db.com/exploits/16503"},{"source":"exploitdb","id":"EDB-16623","title":"Adobe - 'Doc.media.newPlayer' Use-After-Free (Metasploit) (2)","type":"local","platform":"windows","date":"2010-09-25","verified":true,"url":"https://www.exploit-db.com/exploits/16623"}],"affected":[{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::client","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:4","package":"acroread-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-1.el4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_extras:3","package":"acroread-uninstall","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.3-3"}]}],"bundled":6}],"products":[{"vendor":"adobe","product":"acrobat"},{"vendor":"adobe","product":"acrobat and reader"},{"vendor":"adobe","product":"acrobat_reader"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"suse","product":"linux_enterprise"},{"vendor":"suse","product":"linux_enterprise_debuginfo"}],"references":[{"url":"http://www.securityfocus.com/bid/37331","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html","tags":["x_refsource_MISC","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37690","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/38138","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=547799","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"http://osvdb.org/60980","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/508357","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/54747","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/3518","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-02.html","tags":["x_refsource_CONFIRM","x_transferred","Not Applicable","article"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0060.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link"]},{"url":"http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/0103","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Broken Link"]},{"url":"http://www.adobe.com/support/security/advisories/apsa09-07.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.symantec.com/connect/blogs/zero-day-xmas-present","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/38215","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-013A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-4324","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4324","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rv25-qx26-27xv"},{"url":"https://access.redhat.com/errata/RHSA-2010:0037","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=472975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=473217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=554293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=554296","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0037.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3953","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3954","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3954","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3954","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3955","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3955","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3956","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-3959","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-3959","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3959","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-4324","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-4324","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0038","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0038.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0060","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0060.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-4324","description":"Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.","status":"published","published":"2009-12-15T02:00:00Z","modified":"2025-10-22T00:05:53.934Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:33:24.782697Z"}],"euvd":[{"id":"EUVD-2009-4292","description":"Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.","status":"published","published":"2009-12-15T02:00:00Z","modified":"2025-10-22T00:05:53Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-06-08","updated_at":"2026-11-02T19:49:38.726368Z"}],"ghsa":[{"id":"GHSA-rv25-qx26-27xv","title":"Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader...","description":"Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.","status":"published","published":"2022-05-02T03:53:42Z","modified":"2025-10-22T03:31:33Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:09.843024Z"}],"kev":[{"id":"CVE-2009-4324","title":"Adobe Acrobat and Reader Use-After-Free Vulnerability","description":"Use-after-free vulnerability in Adobe Acrobat and Reader allows remote attackers to execute code via a crafted PDF file.","cwes":["CWE-399"],"kev":{"date_added":"2022-06-08","due_date":"2022-06-22","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2009-4324","description":"Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.","status":"published","published":"2009-12-15T02:30:00.217Z","modified":"2026-06-16T23:13:26.803Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:01:37.939838Z"}],"osv":[{"id":"RHSA-2010:0037","title":"Red Hat Security Advisory: acroread security and bug fix update","status":"published","published":"2024-09-13T06:46:11Z","modified":"2026-06-29T10:02:53Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2010:0038","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T06:46:15Z","modified":"2026-06-29T10:02:53Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2010:0060","title":"Red Hat Security Advisory: acroread security update","status":"published","published":"2024-09-13T06:46:46Z","modified":"2026-06-29T10:02:57Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}