CVE-2009-4195

Adobe Illustrator <14.0.0 - Buffer Overflow

Title source: llm

Description

Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.

Exploits (4)

exploitdb WORKING POC VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/16669
exploitdb WORKING POC VERIFIED
by dookie · rubylocalwindows
https://www.exploit-db.com/exploits/10344
exploitdb WORKING POC VERIFIED
by pyrokinesis · phplocalwindows
https://www.exploit-db.com/exploits/10281
metasploit WORKING POC GREAT
by pyrokinesis, dookie · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_illustrator_v14_eps.rb

Scores

EPSS 0.8720
EPSS Percentile 99.5%

Details

CWE
CWE-119
Status published
Products (2)
adobe/illustrator 13.0.0 cs4
adobe/illustrator 14.0.0 cs4
Published Dec 04, 2009
Tracked Since Feb 18, 2026