CVE-2009-4195
Adobe Illustrator <14.0.0 - Buffer Overflow
Title source: llmDescription
Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.
Exploits (4)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/16669
exploitdb
WORKING POC
VERIFIED
by dookie · rubylocalwindows
https://www.exploit-db.com/exploits/10344
exploitdb
WORKING POC
VERIFIED
by pyrokinesis · phplocalwindows
https://www.exploit-db.com/exploits/10281
metasploit
WORKING POC
GREAT
by pyrokinesis, dookie · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_illustrator_v14_eps.rb
References (10)
Scores
EPSS
0.8720
EPSS Percentile
99.5%
Details
CWE
CWE-119
Status
published
Products (2)
adobe/illustrator
13.0.0 cs4
adobe/illustrator
14.0.0 cs4
Published
Dec 04, 2009
Tracked Since
Feb 18, 2026