Adobe · Acrobat and Reader, Flash Player
CVE-2009-1862
Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
这是什么
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
CISA: Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).
该怎么做
For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.
美国联邦机构的修复期限：2022年6月22日
- 加入 CISA 列表
- 2022年6月8日
- 发布日期
- 2009年7月23日
- 严重程度
- 高 7.8 CVSS 3.1
- 未来 30 天遭受攻击的概率（EPSS）
- 21% 位列所有已知漏洞的前 2.4%
- 弱点类型
- CWE-94
- 更多详情
- NVD · CVE.org · CISA
全部参考链接（20）
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html
- http://security.gentoo.org/glsa/glsa-200908-04.xml
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
- http://www.kb.cert.org/vuls/id/259425
- http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99
- http://support.apple.com/kb/HT3864
- http://isc.sans.org/diary.html?storyid=6847
- http://www.adobe.com/support/security/bulletins/apsb09-13.html
- http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html
- http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability
- http://bugs.adobe.com/jira/browse/FP-1265
- http://www.adobe.com/support/security/bulletins/apsb09-10.html
- http://secunia.com/advisories/36374
- http://support.apple.com/kb/HT3865
- http://secunia.com/advisories/36193
- http://secunia.com/advisories/36701
- http://www.adobe.com/support/security/advisories/apsa09-03.html
- http://news.cnet.com/8301-27080_3-10293389-245.html
- http://www.securityfocus.com/bid/35759
Adobe 的其他被利用漏洞
| 加入日期 | 漏洞 | 产品 | 严重程度 | 受攻击概率 |
|---|---|---|---|---|
| 2026年10月27日 | Unrestricted Upload of File with Dangerous Type | Commerce and Magento | 严重 9.3 | 31% |
| 2026年9月24日 | Commerce and Magento Incorrect Authorization Vulnerability | Commerce and Magento | 严重 9.1 | 90% |
| 2026年9月8日 | Improper Neutralization of Special Elements Used in a Template Engine | Commerce and Magento | 严重 10.0 | 3.9% |
| 2026年7月7日 | Path Traversal | ColdFusion | 严重 10.0 | 42% |
| 2026年5月20日 | Heap-Based Buffer Overflow | Acrobat and Reader | 高 8.8 | 87% |
| 2026年4月13日 | Use-After-Free | Acrobat | 高 7.8 | 33% |
| 2026年4月13日 | Prototype Pollution | Acrobat and Reader | 高 8.6 | 7.2% |
| 2025年10月24日 | Improper Input Validation | Commerce and Magento | 严重 9.1 | 95% |
来源：Known Exploited Vulnerabilities（CISA，公有领域）、CVE records（cve.org）和 EPSS（FIRST）。受攻击概率是 EPSS 对未来 30 天内有人尝试利用该漏洞的估计。