CVE-2009-1862
Description
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
How to fix
For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.
CISA due date: Jun 22, 2022Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adobe acrobat | 9.0 ≤ v ≤ 9.1.2 | — |
| adobe acrobat_reader | 9.0 ≤ v ≤ 9.1.2 | — |
| adobe flash_player | 9.0 ≤ v ≤ 9.0.159.0, 10.0 ≤ v ≤ 10.0.22.87 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.