Search/CVE-2009-4324
● CVE — High

CVE-2009-4324

Vendoradobe, suse, opensuseProductacrobat, acrobat reader, linux enterprise debuginfo, opensuse, linux enterpriseDiscoveredDec 15, 2009UpdatedApr 21, 2026

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

View graph Watch Export
CVSS v3.1
7.8 HIGH
EPSS
81.9%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 25, 2026
▼ 0.05pp
81.9% → 81.9% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Connections
6 relationships
Timeline
disclosure → media coverage
Dec 15, 2009
Disclosure — published as a CVE record. · last revised by NVD Apr 21, 2026