ZeroDay Findings
Sign inSign up

Findings

CVE-2009-1862

Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

Published Jul 23, 2009 · updated Jun 16, 2026 · adobe acrobat

Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 23, 2009 · Catalog

    Detected

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.

  2. Jun 8, 2022 · CISA KEV

    Known exploited

    For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.

  3. Jun 22, 2022 · CISA KEV

    Remediation due

    For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.

  4. Jun 16, 2026 · Catalog

    Updated

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.

Required action

For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.

CISA due date Jun 22, 2022

Affected

  • cpe adobe/acrobatversion unspecified
  • cpe adobe/acrobat readerversion unspecified
  • cpe adobe/flash playerversion unspecified
  • vendor Adobe Acrobat and Reader, Flash Playerversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2009-1862

    Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).

    cisa.gov
  • CVE.orgVulnerability recordCVE-2009-1862

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2009-1862

    30-day exploitation probability 21.2%

    first.org
  • NIST NVDVulnerability recordCVE-2009-1862

    Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash applicatio

    nvd.nist.gov

References