Unscored severity · published Jan 8, 2010
CVE-2009-3952
Buffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows attackers to execute arbitrary code via unspecified vectors
–
CVSS
8%
EPSS
No
On KEV
Description
Buffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.0% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IL
Illustrator · Adobe
through 13.0.3; 13.0; 13.0.1; 13.0.2; 14.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3952
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3952
Patch
http://www.adobe.com/support/security/bulletins/apsb10-01.html
Patch
http://www.securityfocus.com/bid/37666
More from Illustrator
9.3
CVE-2026-48334
Illustrator | Improper Input Validation (CWE-20)
8.8
CVE-2021-21105
Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file
8.8
CVE-2021-21104
Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file
8.8
CVE-2021-21103
Adobe Illustrator version 25.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file
8.8
CVE-2021-21102
Adobe Illustrator version 25.2 (and earlier) is affected by a Path Traversal vulnerability when parsing a specially crafted file