What is the severity of CVE-2009-4195?

CVE-2009-4195 has a critical severity level due to its potential for remote code execution.

How do I fix CVE-2009-4195?

To fix CVE-2009-4195, upgrade to the latest version of Adobe Illustrator that addresses the vulnerability.

What products are affected by CVE-2009-4195?

CVE-2009-4195 impacts Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier versions.

What type of attack exploits CVE-2009-4195?

CVE-2009-4195 can be exploited through a crafted Encapsulated PostScript (.eps) file containing a long DSC comment.

Can CVE-2009-4195 affect my system security?

Yes, CVE-2009-4195 poses a significant risk as it allows attackers to execute arbitrary code on vulnerable systems.

Vulnerability/
CVE-2009-4195

critical

9.3

CWE

119

4/12/2009

7/8/2024

CVE-2009-4195: Buffer Overflow

First published: Fri Dec 04 2009(Updated: )

Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.

Credit: psirt@adobe.com

Affected Software	Affected Version	How to fix
Adobe Illustrator	=13.0.0-cs4
Adobe Illustrator	=14.0.0-cs4

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2009-4195?
CVE-2009-4195 has a critical severity level due to its potential for remote code execution.
How do I fix CVE-2009-4195?
To fix CVE-2009-4195, upgrade to the latest version of Adobe Illustrator that addresses the vulnerability.
What products are affected by CVE-2009-4195?
CVE-2009-4195 impacts Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier versions.
What type of attack exploits CVE-2009-4195?
CVE-2009-4195 can be exploited through a crafted Encapsulated PostScript (.eps) file containing a long DSC comment.
Can CVE-2009-4195 affect my system security?
Yes, CVE-2009-4195 poses a significant risk as it allows attackers to execute arbitrary code on vulnerable systems.

collector/nvd-historical
collector/nvd-index
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/author
agent/last-modified-date
agent/weakness
agent/tags
agent/event
agent/first-publish-date
agent/description
agent/source
vendor/adobe
canonical/adobe illustrator
version/adobe illustrator/13.0.0-cs4
version/adobe illustrator/14.0.0-cs4

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2009-4195?
CVE-2009-4195 has a critical severity level due to its potential for remote code execution.
How do I fix CVE-2009-4195?
To fix CVE-2009-4195, upgrade to the latest version of Adobe Illustrator that addresses the vulnerability.
What products are affected by CVE-2009-4195?
CVE-2009-4195 impacts Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier versions.
What type of attack exploits CVE-2009-4195?
CVE-2009-4195 can be exploited through a crafted Encapsulated PostScript (.eps) file containing a long DSC comment.
Can CVE-2009-4195 affect my system security?
Yes, CVE-2009-4195 poses a significant risk as it allows attackers to execute arbitrary code on vulnerable systems.