CVE-2009-3952: Adobe Illustrator

High severity, CVSS 10.0. EPSS: 8% chance of exploitation in the next 30 days.

Buffer overflow in Adobe Illustrator CS3 13.0.3 and earlier and Illustrator CS4 14.0.0 allows attackers to execute arbitrary code via unspecified vectors.

Affected products

• Adobe Illustrator: up to and including 13.0.3; version 13.0 only; version 13.0.1 only; version 13.0.2 only; version 14.0.0 only

Published 2010-01-08. Last modified 2026-06-16.