$ cve CVE-2009-4195 JSON

CVE-2009-4195 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 70.7% (pctl 99)

Patch early

A public exploit exists.

Description

Buffer overflow in Adobe Illustrator CS4 14.0.0, CS3 13.0.3 and earlier, and CS3 13.0.0 allows remote attackers to execute arbitrary code via a long DSC comment in an Encapsulated PostScript (.eps) file. NOTE: some of these details are obtained from third party information.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	70.68% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2009-12-04
Last modified	2026-06-16

Affected (1)

Vendor	Product
adobe	illustrator

Public exploits

Source	Title	Date
exploit-db	Adobe Illustrator CS4 14.0.0 - Postscript (.eps) Buffer Overflow (Metasploit)	2010-09-25
exploit-db	Adobe Illustrator CS4 14.0.0 - eps Universal Buffer Overflow (Metasploit)	2009-12-07
exploit-db	Adobe Illustrator CS4 14.0.0 - Encapsulated Postscript '.eps' Local Buffer Overflow	2009-12-03

References

→ the Explorer · watch your stack · NVD