Login Request a demo
High severity · published Mar 19, 2009
CVE-2009-0927
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
In wildKEV
8.8
CVSS
96.6%
EPSS
Yes
On KEV
Description
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)96.6% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 25, 2022
Federal remediation dueApr 15, 2022
Ransomware campaign useNot known
Affected products
Which versions
AR
Acrobat Reader · Adobe
7.0 before 7.1.1; 8.0 before 8.1.3; 9.0 before 9.1 · source: NVD
RA
Reader and Acrobat · Adobe
All versions, or not specified · source: KEV
Affected product
AR
Acrobat Reader
Adobe
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0927
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0927
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_MISC
http://www.zerodayinitiative.com/advisories/ZDI-09-014
exploit
http://www.exploit-db.com/exploits/9579
vdb-entry
http://www.securityfocus.com/bid/34169
third-party-advisory
http://secunia.com/advisories/34790
x_refsource_CONFIRM
http://www.adobe.com/support/security/bulletins/apsb09-04.html
vdb-entry
http://www.securitytracker.com/id?1021861
More from Acrobat Reader
9.8
CVE-2014-0546
Adobe Reader and Acrobat Sandbox Bypass Vulnerability
9.8
CVE-2013-3346
Adobe Reader and Acrobat Memory Corruption Vulnerability
9.8
CVE-2013-2729
Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
9.8
CVE-2011-2462
Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
8.8
CVE-2021-28550
Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution