CVE-2009-3431: Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions;...

Security readout for executives and security teams

This CVE describes a crash condition in old Adobe Reader and Acrobat versions when handling a specially malformed PDF. The documented impact is denial of service to the application, not code execution. Business urgency is mainly legacy endpoint hygiene and preventing disruption where outdated PDF readers still process untrusted files. Exposure is most likely on legacy desktops, servers, kiosks, or virtual desktop images that still run affected Adobe Reader or Acrobat versions and open untrusted PDF files. Current managed fleets are less likely exposed if Adobe PDF software has been updated or removed. Prioritize remediation if legacy Adobe Reader or Acrobat remains in production or handles external PDFs. This is not evidenced as a widespread active exploit in the provided sources, but outdated PDF software is a recurring risk and should be removed from business workflows. Mitigation focus: Inventory Adobe Reader and Acrobat versions across endpoints.; Upgrade or remove affected versions using Adobe APSB09-15 guidance.; Limit opening untrusted PDFs on legacy systems until remediated..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.