Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2009-0927
HistoryMar 19, 2009 - 10:30 a.m.

CVE-2009-0927

2009-03-1910:30:00
CWE-20
mitre
web.nvd.nist.gov
882
In Wild
adobe
reader
acrobat
cve-2009-0927
stack-based buffer overflow
nvd
vulnerability
remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

High

EPSS

0.975

Percentile

100.0%

JSON

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.

Affected configurations

Nvd
Node
adobeacrobat_readerRange7.0โ€“7.1.1
OR
adobeacrobat_readerRange8.0โ€“8.1.3
OR
adobeacrobat_readerRange9.0โ€“9.1
VendorProductVersionCPE
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*

Related

cvelist 2
attackerkb 2
openvas 12
nvd 2
prion 2
metasploit 2
exploitpack 1
saint 8
threatpost 7
packetstorm 1
canvas 2
exploitdb 7
zdi 1
checkpoint_advisories 6
seebug 3
securityvulns 4
cisa_kev 1
symantec 1
nessus 12
gentoo 1
suse 1
ubuntucve 1
cert 1
cve 1
redhat 2
thn 1
cvelist
cvelist
CVE-2009-0927
2009-03-19 10:00:00
CVE-2009-0658
2009-02-20 19:00:00
attackerkb
attackerkb
CVE-2009-0927
2009-03-19 00:00:00
CVE-2009-0658
2009-02-20 00:00:00
openvas
openvas
Adobe Reader Buffer Overflow Vulnerability (APSA09-01) - Linux
2009-03-03 00:00:00
Gentoo Security Advisory GLSA 200904-17 (acroread)
2009-04-20 00:00:00
SUSE: Security Advisory for acroread (SUSE-SA:2009:014)
2009-03-31 00:00:00
nvd
nvd
CVE-2009-0927
2009-03-19 10:30:00
CVE-2009-0658
2009-02-20 19:30:00
prion
prion
Stack overflow
2009-03-19 10:30:00
Buffer overflow
2009-02-20 19:30:00
metasploit
metasploit
Adobe Collab.getIcon() Buffer Overflow
2009-03-28 07:40:29
Adobe Collab.getIcon() Buffer Overflow
2009-03-28 07:40:29
exploitpack
exploitpack
Adobe AcrobatReader 7.1.18.1.39.1 - Collab getIcon Universal
2009-09-03 00:00:00
saint
saint
Adobe Acrobat JavaScript getIcon method buffer overflow
2009-03-27 00:00:00
Adobe Acrobat JavaScript getIcon method buffer overflow
2009-03-27 00:00:00
Adobe Acrobat JavaScript getIcon method buffer overflow
2009-03-27 00:00:00
threatpost
threatpost
New PDF Attack Targets Aviation Defense Industry
2012-09-13 19:46:42
Free Beacon Article Redirects to ZeroAccess Rootkit, Fake AV
2013-06-10 16:17:14
Hacked Media Sites Serving Fake AV Malware
2013-05-07 12:58:12
packetstorm
packetstorm
Adobe Collab.getIcon() Buffer Overflow
2009-11-26 00:00:00
canvas
canvas
Immunity Canvas: ACROBAT_JS4
2009-03-19 10:30:00
Immunity Canvas: ACROBAT_JBIG
2009-02-20 19:30:00
exploitdb
exploitdb
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal
2009-09-03 00:00:00
Adobe Acrobat Reader 8.1.2 < 9.0 - 'getIcon()' Memory Corruption
2009-05-04 00:00:00
Adobe - 'Collab.getIcon()' Local Buffer Overflow (Metasploit) (2)
2010-09-25 00:00:00
zdi
zdi
Adobe Acrobat getIcon() Stack Overflow Vulnerability
2009-03-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat JavaScript getIcon Method Buffer Overflow (CVE-2009-0927)
2009-10-08 00:00:00
Adobe Acrobat JavaScript getIcon Method Buffer Overflow - Ver2 (CVE-2009-0927)
2014-03-31 00:00:00
Security Best Practice: Protect Yourself against Adobe Multiple Products JBIG2 Stream Buffer Overflow Vulnerability
2009-02-24 00:00:00
seebug
seebug
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 Collab getIcon Universal Exploit
2009-09-04 00:00:00
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal Exploit
2014-07-01 00:00:00
Adobe Acrobatๅ’ŒReader PDFๆ–‡ไปถๅค„็†็ผ“ๅ†ฒๅŒบๆบขๅ‡บๆผๆดž
2009-02-23 00:00:00
securityvulns
securityvulns
ZDI-09-014: Adobe Acrobat getIcon&#40;&#41; Stack Overflow Vulnerability
2009-03-25 00:00:00
Adobe Acrobat and Reader Collab &#39;getIcon&#40;&#41;&#39; JavaScript Method Exploit and Report &#40;CVE-2009-0927&#41;
2009-09-04 00:00:00
Adobe Acrobat / Reader code execution
2009-09-04 00:00:00
cisa_kev
cisa_kev
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
2022-03-25 00:00:00
symantec
symantec
Adobe Acrobat and Reader Collab 'getIcon()' JavaScript Method Remote Code Execution Vulnerability
2009-03-18 00:00:00
nessus
nessus
SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 690)
2009-09-24 00:00:00
Adobe Acrobat < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities
2009-08-28 00:00:00
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6121)
2011-01-27 00:00:00
gentoo
gentoo
Adobe Reader: User-assisted execution of arbitrary code
2009-04-18 00:00:00
suse
suse
remote code execution in acroread
2009-03-27 15:24:52
ubuntucve
ubuntucve
CVE-2009-0658
2009-02-20 00:00:00
cert
cert
Adobe Reader and Acrobat JBIG2 buffer overflow vulnerability
2009-02-20 00:00:00
cve
cve
CVE-2009-0658
2009-02-20 19:30:00
redhat
redhat
(RHSA-2008:0974) Critical: acroread security update
2008-11-12 00:00:00
(RHSA-2009:0376) Critical: acroread security update
2009-03-25 00:00:00
thn
thn
Phoenix Exploit's Kit 2.8 mini version
2011-10-12 17:41:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

High

EPSS

0.975

Percentile

100.0%

JSON
Related for CVE-2009-0927
cvelist2attackerkb2openvas12nvd2prion2metasploit2exploitpack1saint8threatpost7packetstorm1canvas2exploitdb7zdi1checkpoint_advisories6seebug3securityvulns4cisa_kev1symantec1nessus12gentoo1suse1ubuntucve1cert1cve1redhat2thn1