NetSight
IP …
high8.8Known exploitedPublic exploit code

CVE-2009-3459

Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

Exploited in the wild

This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2026-05-20. Federal due date: 2026-06-03.

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Adobe Acrobat and Reader contain a heap-based buffer overflow vulnerability which could allow remote attackers to execute arbitrary code via a crafted PDF file that triggers memory corruption.

Affected products

VendorProductAffected versions
AdobeAcrobat
from 7.0 before 7.1.4
from 8.0 before 8.1.7
from 9.0 before 9.2
AdobeAcrobat Reader
from 7.0 before 7.1.4
from 8.0 before 8.1.7
from 9.0 before 9.2

Weakness classification

CWE-119CWE-122

References