Adobe

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-3955 1Adobe 2Acrobat Acrobat Reader Apr 23, 2026 Jan 13, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c stream of a JpxDecode encoded data stream...Show more Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted JPC_MS_RGN marker in the Jp2c stream of a JpxDecode encoded data stream, which triggers an integer sign extension that bypasses a sanity check, leading to memory corruption.Show less
CVE-2009-3954 1Adobe 2Acrobat Acrobat Reader Apr 23, 2026 Jan 13, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a "DLL-loading vulnerabili...Show more The 3D implementation in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, might allow attackers to execute arbitrary code via unspecified vectors, related to a "DLL-loading vulnerability."Show less
CVE-2009-3953 3Adobe OpensuseSuse 4Acrobat Linux EnterpriseLinux Enterprise Debuginfo+1 more Apr 21, 2026 Jan 13, 2010 N/A· v4 8.8 HIGH· v3 10.0 HIGH· v2 The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document,...Show more The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitrary code via malformed U3D data in a PDF document, related to a CLODProgressiveMeshDeclaration "array boundary issue," a different vulnerability than CVE-2009-2994.Show less
CVE-2009-3952 1Adobe 1Illustrator Apr 23, 2026 Jan 8, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows attackers to execute arbitrary code via unspecified vectors.
CVE-2009-3792 1Adobe 1Flash Media Server Apr 23, 2026 Dec 21, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Directory traversal vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to load arbitrary DLL files via unspecified vectors.
CVE-2009-3791 1Adobe 1Flash Media Server Apr 23, 2026 Dec 21, 2009 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.5.3 allows attackers to cause a denial of service (resource exhaustion) via unknown vectors.
CVE-2009-4324 3Adobe OpensuseSuse 5Acrobat Acrobat ReaderLinux Enterprise+2 more Apr 21, 2026 Dec 15, 2009 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code v...Show more Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.Show less
CVE-2009-3951 1Adobe 2Adobe Air Flash Player Apr 23, 2026 Dec 10, 2009 N/A· v4 N/A· v3 7.1 HIGH· v2 Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors....Show more Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4820.Show less
CVE-2009-3800 1Adobe 2Adobe Air Flash Player Apr 23, 2026 Dec 10, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allow attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vect...Show more Multiple unspecified vulnerabilities in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allow attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.Show less
CVE-2009-3799 1Adobe 2Adobe Air Flash Player Apr 23, 2026 Dec 10, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptio...Show more Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."Show less
CVE-2009-3798 1Adobe 2Adobe Air Flash Player Apr 23, 2026 Dec 10, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
CVE-2009-3797 1Adobe 2Adobe Air Flash Player Apr 23, 2026 Dec 10, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
CVE-2009-3796 1Adobe 2Adobe Air Flash Player Apr 23, 2026 Dec 10, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, related to a "data injection vulnerability."
CVE-2009-3794 1Adobe 2Adobe Air Flash Player Apr 23, 2026 Dec 10, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via crafted dimensions of JPEG data in an SWF file.
CVE-2009-4195 1Adobe 1Illustrator Apr 23, 2026 Dec 4, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of th...Show more Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-3466 1Adobe 1Shockwave Player Apr 23, 2026 Nov 4, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these...Show more Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption, related to an "invalid string length vulnerability." NOTE: some of these details are obtained from third party information.Show less
CVE-2009-3465 1Adobe 1Shockwave Player Apr 23, 2026 Nov 4, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464....Show more Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3464. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-3464 1Adobe 1Shockwave Player Apr 23, 2026 Nov 4, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465....Show more Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site, related to an "invalid pointer vulnerability," a different issue than CVE-2009-3465. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-3463 1Adobe 1Shockwave Player Apr 23, 2026 Nov 4, 2009 N/A· v4 N/A· v3 9.3 HIGH· v2 Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party info...Show more Array index error in Adobe Shockwave Player before 11.5.2.602 allows remote attackers to execute arbitrary code via crafted Shockwave content on a web site. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-3462 1Adobe 2Acrobat Acrobat Reader Apr 23, 2026 Oct 19, 2009 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 on Unix, when Debug mode is enabled, allow attackers to execute arbitrary code via unspecified vectors, related to a "format bug."

Previous 1...356357358...370 Next