CVE-2009-1862 kev in the critical feed json
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0…
published 2009-07-23 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-1857
- cvss
- 7.8
- version 3.1, CNA
- cisa kev
- Exploited
- added 2022-06-08
- epss
- 21.2%
- EPSS 21.2% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
Patch / fix
cisa required action For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.
- flash-plugin RHEL 3 EXTRAS 9.0.246.0-2.el3.with.oss
- flash-plugin RHEL 4 EXTRAS 9.0.246.0-2.el4
- flash-plugin RHEL 5 EXTRAS 10.0.32.18-2.el5
red hat advisories RHSA-2009:1189RHSA-2009:1188
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2009-1862 updated cvss 6.8
flash-plugin: Remote code execution vulnerability via malicious SWF (Shockwave Flash) content
-
Red Hat Desktop version 3 Extras flash-plugin 9.0.246.0-2.el3.with.oss Red Hat Desktop version 4 Extras flash-plugin 9.0.246.0-2.el4 Red Hat Enterprise Linux AS version 3 Extras flash-plugin 9.0.246.0-2.el3.with.oss Red Hat Enterprise Linux AS version 4 Extras flash-plugin 9.0.246.0-2.el4fixed: vendor fix RHSA-2009:1189
-
Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin 10.0.32.18-2.el5fixed: vendor fix RHSA-2009:1188
-
Red Hat Enterprise Linux ES version 3 Extras flash-plugin 9.0.246.0-2.el3.with.oss Red Hat Enterprise Linux ES version 4 Extras flash-plugin 9.0.246.0-2.el4fixed: vendor fix RHSA-2009:1189
-
Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin 10.0.32.18-2.el5fixed: vendor fix RHSA-2009:1188
-
Red Hat Enterprise Linux WS version 3 Extras flash-plugin 9.0.246.0-2.el3.with.oss Red Hat Enterprise Linux WS version 4 Extras flash-plugin 9.0.246.0-2.el4fixed: vendor fix RHSA-2009:1189
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Timeline
- Published
- Added to CISA KEV
- CISA patch deadline
- CISA SSVC: exploitation active
Known exploited
- Added
- 4 y ago
- Patch by
- 2022-06-22 (4 y ago)
- Ransomware
- Not known
- Required action
- For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.
- Vendor, product
- Adobe, Acrobat and Reader, Flash Player
- CISA name
- Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
ATT&CK techniques
How it is exploited and what it leads to, in MITRE ATT&CK terms.
- T1204.002 Malicious File exploitation
kev release 2025-07-28, att&ck v16.1. KEV to ATT&CK mappings by the MITRE Center for Threat-Informed Defense (Mappings Explorer, Apache-2.0). © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. Terms of use
CISA SSVC
- Exploitation
- Active, exploited in the wild
- Automatable
- no
- Technical impact
- total
- Assessed
- 20 mo ago
Exploit prediction
21.20% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-787 Out-of-bounds Write
References
-
sunsolve.sun.com
/search/document.do?assetkey=1-66-266108-1
vendor-advisory, broken-link
-
lists.apple.com
/archives/security-announce/2009/Sep/msg00003.html
vendor-advisory, mailing-list, third-party-advisory
-
security.gentoo.org
/glsa/glsa-200908-04.xml
vendor-advisory, third-party-advisory
-
lists.apple.com
/archives/security-announce/2009/Sep/msg00004.html
vendor-advisory, mailing-list, third-party-advisory
-
blogs.adobe.com
/psirt/2009/07/potential_adobe_reader_and_fla.html
broken-link, vendor-advisory
-
adobe.com
/support/security/advisories/apsa09-03.html
vendor-advisory
-
kb.cert.org
/vuls/id/259425
third-party-advisory, us-government-resource
-
symantec.com
/business/security_response/writeup.jsp?docid=2009-072209-2512-99
broken-link
-
support.apple.com
/kb/HT3864
third-party-advisory
-
isc.sans.org
/diary.html?storyid=6847
not-applicable
-
adobe.com
/support/security/bulletins/apsb09-13.html
not-applicable
-
symantec.com
/connect/blogs/next-generation-flash-vulnerability
broken-link
-
bugs.adobe.com
/jira/browse/FP-1265
broken-link
-
adobe.com
/support/security/bulletins/apsb09-10.html
not-applicable
-
secunia.com
/advisories/36374
third-party-advisory, broken-link
-
support.apple.com
/kb/HT3865
third-party-advisory
-
secunia.com
/advisories/36193
third-party-advisory, broken-link
-
secunia.com
/advisories/36701
third-party-advisory, broken-link
-
news.cnet.com
/8301-27080_3-10293389-245.html
broken-link
-
securityfocus.com
/bid/35759
vdb-entry, broken-link, third-party-advisory
-
cisa.gov
/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1862
government-resource, us-government-resource
Sources
- CVE List CVE-2009-1862
- NVD CVE-2009-1862
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.