Vulnerability in N/a
CVE-2009-4195
Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obt…
EPSS: 0.872 (99.5th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 60632 (x_refsource_OSVDB, vdb-entry)
- retrogod.altervista.org/9sg_adobe_illuso.html (x_refsource_MISC)
- 37563 (x_refsource_SECUNIA, third-party-advisory)
- blogs.adobe.com/psirt/2009/12/potential_adobe_illustrator_cs.html (x_refsource_MISC)
- 1023276 (vdb-entry, x_refsource_SECTRACK)
- ADV-2009-3396 (vdb-entry, x_refsource_VUPEN)
- 37192 (vdb-entry, x_refsource_BID)
- www.adobe.com/support/security/bulletins/apsb10-01.html (x_refsource_CONFIRM)
- adobe-illustrator-eps-bo(54521) (vdb-entry, x_refsource_XF)
- 20091203 Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit (mailing-list, x_refsource_BUGTRAQ)
Frequently asked questions
- What is CVE-2009-4195?
- CVE-2009-4195 is a vulnerability in N/a. Published 2009-12-04.
- Is CVE-2009-4195 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.