CVE-2009-3459
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption.
CISA Known Exploited Vulnerability
Vendor / Product
Adobe — Acrobat and Reader
Date Added
2026-05-20
Remediation Due
2026-06-03
https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities ; https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports ; https://nvd.nist.gov/vuln/detail/CVE-2009-3459
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| adobe | acrobat | 7.0 – 7.1.4 |
| adobe | acrobat | 8.0 – 8.1.7 |
| adobe | acrobat | 9.0 – 9.2 |
| adobe | acrobat_reader | 7.0 – 7.1.4 |
| adobe | acrobat_reader | 8.0 – 8.1.7 |
| adobe | acrobat_reader | 9.0 – 9.2 |
References & Advisories (13)
Vendor Advisory
Vendor Advisory
Vendor Advisory
US Government Resource
US Government Resource
Third Party Advisory
VDB Entry
Patch
Vendor Advisory
Not Applicable
Broken Link
Vendor Advisory
Broken Link
Broken Link
Broken Link
Broken Link