Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is in the KEV database since June 8, 2022.

The EPSS score is 0.92867.

Exploitation active

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
n/a n/a affected
Version Status Constraints
n/a affected
—

Configuration 1 [-]

AND
OR cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:a:suse:linux_enterprise_debuginfo:11:-:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise:10.0:sp2:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:*
Package CPE Advisory Released Date
Extras for RHEL 3
acroread-0:9.3-3 cpe:/a:redhat:rhel_extras:3 RHSA-2010:0060 2010-01-20T00:00:00Z
Extras for RHEL 4
acroread-0:9.3-1.el4 cpe:/a:redhat:rhel_extras:4 RHSA-2010:0038 2010-01-13T00:00:00Z
Supplementary for Red Hat Enterprise Linux 5
acroread-0:9.3-1.el5 cpe:/a:redhat:rhel_extras:5 RHSA-2010:0037 2010-01-13T00:00:00Z

No data.

Subscriptions

Vendors Products
Adobe Subscribe
Acrobat Subscribe
Acrobat Reader Subscribe
Apple Subscribe
Mac Os X Subscribe
Microsoft Subscribe
Windows Subscribe
Opensuse Subscribe
Opensuse Subscribe
Redhat Subscribe
Rhel Extras Subscribe
Suse Subscribe
Linux Enterprise Subscribe
Linux Enterprise Debuginfo Subscribe

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://blogs.adobe.com/psirt/2009/12/new_adobe_reader_and_acrobat_v.html cve-icon cve-icon
http://contagiodump.blogspot.com/2009/12/virustotal-httpwww.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html cve-icon cve-icon
http://osvdb.org/60980 cve-icon cve-icon
http://secunia.com/advisories/37690 cve-icon cve-icon
http://secunia.com/advisories/38138 cve-icon cve-icon
http://secunia.com/advisories/38215 cve-icon cve-icon
http://www.adobe.com/support/security/advisories/apsa09-07.html cve-icon cve-icon
http://www.adobe.com/support/security/bulletins/apsb10-02.html cve-icon cve-icon
http://www.kb.cert.org/vuls/id/508357 cve-icon cve-icon
http://www.metasploit.com/redmine/projects/framework/repository/revisions/7881/entry/modules/exploits/windows/fileformat/adobe_media_newplayer.rb cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2010-0060.html cve-icon cve-icon
http://www.securityfocus.com/bid/37331 cve-icon cve-icon
http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214 cve-icon cve-icon
http://www.symantec.com/connect/blogs/zero-day-xmas-present cve-icon cve-icon
http://www.us-cert.gov/cas/techalerts/TA10-013A.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/3518 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/0103 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=547799 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/54747 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2009-4324 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6795 cve-icon cve-icon
https://www.cisa.gov/known-exploited-vulnerabilities-catalog cve-icon
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-4324 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2009-4324 cve-icon
History

Wed, 22 Oct 2025 01:30:00 +0000

Type Values Removed Values Added
References

Tue, 21 Oct 2025 20:30:00 +0000

Type Values Removed Values Added
References

Tue, 21 Oct 2025 19:30:00 +0000

Type Values Removed Values Added
References

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.93425}

 epss

{'score': 0.93381}

Sat, 12 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.93498}

 epss

{'score': 0.93425}

Tue, 04 Feb 2025 22:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-06-08'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Aug 2024 23:15:00 +0000

Type Values Removed Values Added
References
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2025-10-22T00:05:53.934Z

Reserved: 2009-12-14T00:00:00.000Z

Link: CVE-2009-4324

cve-icon Vulnrichment

Updated: 2024-08-07T07:01:20.249Z

cve-icon NVD

Status : Deferred

Published: 2009-12-15T02:30:00.217

Modified: 2025-10-22T01:15:35.287

Link: CVE-2009-4324

cve-icon Redhat

Severity : Critical

Publid Date: 2009-12-14T00:00:00Z

Links: CVE-2009-4324 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses