CVE-2009-1862: Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

CISA Known Exploited Vulnerability (KEV)

Description

Adobe Acrobat and Reader and Adobe Flash Player allows remote attackers to execute code or cause denial-of-service (DoS).

Required action (CISA)

For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2009-1862

Weakness behind it

CISA records this vulnerability as an instance of CWE-94. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

• NVD: https://nvd.nist.gov/vuln/detail/CVE-2009-1862
• KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog