Vulnerability details
CVE-2009-0927
Actively exploitedAdobe Reader and Acrobat
CVSS 3.1
8.8High
Official description
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.8High | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| No product information recorded. | |||
References and advisories
17- http://www.zerodayinitiative.com/advisories/ZDI-09-014 x_refsource_MISC
- http://www.exploit-db.com/exploits/9579 exploitx_refsource_EXPLOIT-DB
- http://www.securityfocus.com/bid/34169 vdb-entryx_refsource_BID
- http://secunia.com/advisories/34790 third-party-advisoryx_refsource_SECUNIA
- http://www.adobe.com/support/security/bulletins/apsb09-04.html x_refsource_CONFIRM
- http://www.securitytracker.com/id?1021861 vdb-entryx_refsource_SECTRACK
- http://www.vupen.com/english/advisories/2009/0770 vdb-entryx_refsource_VUPEN
- http://secunia.com/advisories/34490 third-party-advisoryx_refsource_SECUNIA
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html vendor-advisoryx_refsource_SUSE
- http://www.securityfocus.com/archive/1/502116/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://secunia.com/advisories/34706 third-party-advisoryx_refsource_SECUNIA
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1 vendor-advisoryx_refsource_SUNALERT
- http://security.gentoo.org/glsa/glsa-200904-17.xml vendor-advisoryx_refsource_GENTOO
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html vendor-advisoryx_refsource_SUSE
- http://www.vupen.com/english/advisories/2009/1019 vdb-entryx_refsource_VUPEN
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49312 vdb-entryx_refsource_XF
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0927 government-resource
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2009-03-19
- Last updated
- 2025-10-22
- State
- Published
- Assigner (CNA)
- mitre
- Kolun priority
- 88 · Critical
CISA KEV catalog
- Date added
- 2022-03-25
- Due date
- 2022-04-15
- Used in ransomware
- Unknown
Exploit prediction (EPSS)
96.63%
Probability of exploitation in 30 days
99.8%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Active
- Technical impact
- Total
Weaknesses (CWE)
- CWE-121Stack-based Buffer Overflow