Dojo Sec Adobe bug fixed
Summary: Adobe released a security bulletin on June 9th resolving a memory corruption vulnerability, CVE-2009-1859, that could potentially lead to code execution. The bug was the one found during a DojoSec talk in April titled "1 Byte, 5 Minutes, Holy Hot Tuna," and it is covered by Snort Rule SID 15562.
Key Takeaway: A single byte of input was enough to trigger a memory corruption flaw in Adobe software that could lead to code execution, and the researcher's own note that it took about nine minutes and looked difficult to make reliable is a reminder that exploitability is a judgment call, not a binary one.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2009-1859
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026