cyfenced.com →

[ CVE-2009-0927 · Published 19 Mar 2009 ]

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

Exploited · CISA KEV CVSS 8.8 EPSS 97%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-03-25
  • EPSS: 97% chance of exploitation in the next 30 days (higher than 100% of CVEs)

[ Description ]Official description

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.

CISA: Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 15 Apr 2022): Apply updates per vendor instructions.

[ References ]References