Lucene search
SAINT CorporationSAINT:AFE3E3BE3BB3652683F3F01263CCE593HistoryMar 27, 2009 - 12:00 a.m.
Adobe Acrobat JavaScript getIcon method buffer overflow
2009-03-2700:00:00
SAINT Corporation
www.saintcorporation.com
31
EPSS
0.975
Percentile
100.0%
Added: 03/27/2009
CVE: CVE-2009-0927
BID: 34169
Background
Adobe Acrobat is software for creating PDF documents. Adobe Reader is free software for viewing PDF documents.
Problem
A buffer overflow vulnerability allows command execution when a user opens a PDF file which calls the JavaScript getIcon method with a long, specially crafted argument.
Resolution
Upgrade to Adobe Acrobat 7.1.1, 8.1.4, or 9.1 or higher as described in APSB09-04.
References
<http://www.zerodayinitiative.com/advisories/ZDI-09-014/>
Limitations
Exploit works on Adobe Acrobat 9.0 and requires a user to load the exploit file in Adobe Acrobat.
Platforms
Windows XP
Related
metasploit
metasploit
Adobe Collab.getIcon() Buffer Overflow
2009-03-28 07:40:29
Adobe Collab.getIcon() Buffer Overflow
2009-03-28 07:40:29
saint
saint
Adobe Acrobat JavaScript getIcon method buffer overflow
2009-03-27 00:00:00
Adobe Acrobat JavaScript getIcon method buffer overflow
2009-03-27 00:00:00
Adobe Acrobat JavaScript getIcon method buffer overflow
2009-03-27 00:00:00
threatpost
threatpost
New PDF Attack Targets Aviation Defense Industry
2012-09-13 19:46:42
Free Beacon Article Redirects to ZeroAccess Rootkit, Fake AV
2013-06-10 16:17:14
Main PHP-Nuke Site Compromised
2010-05-07 15:37:38
exploitpack
exploitpack
Adobe AcrobatReader 7.1.18.1.39.1 - Collab getIcon Universal
2009-09-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Acrobat JavaScript getIcon Method Buffer Overflow (CVE-2009-0927)
2009-10-08 00:00:00
exploitdb
exploitdb
Adobe - 'Collab.getIcon()' Local Buffer Overflow (Metasploit) (2)
2010-09-25 00:00:00
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal
2009-09-03 00:00:00
seebug
seebug
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal Exploit
2014-07-01 00:00:00
Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 Collab getIcon Universal Exploit
2009-09-04 00:00:00
securityvulns
securityvulns
packetstorm
packetstorm
Adobe Collab.getIcon() Buffer Overflow
2009-11-26 00:00:00
canvas
canvas
Immunity Canvas: ACROBAT_JS4
2009-03-19 10:30:00
zdi
zdi
Adobe Acrobat getIcon() Stack Overflow Vulnerability
2009-03-24 00:00:00
cisa_kev
cisa_kev
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
2022-03-25 00:00:00
symantec
symantec
cve
cve
CVE-2009-0927
2009-03-19 10:30:00
attackerkb
attackerkb
CVE-2009-0927
2009-03-19 00:00:00
nvd
nvd
CVE-2009-0927
2009-03-19 10:30:00
openvas
openvas
Adobe Reader Buffer Overflow Vulnerability (APSA09-01) - Linux
2009-03-03 00:00:00
Gentoo Security Advisory GLSA 200904-17 (acroread)
2009-04-20 00:00:00
SUSE: Security Advisory for acroread (SUSE-SA:2009:014)
2009-03-31 00:00:00
cvelist
cvelist
CVE-2009-0927
2009-03-19 10:00:00
prion
prion
Stack overflow
2009-03-19 10:30:00
nessus
nessus
Adobe Acrobat < 9.1 / 8.1.4 / 7.1.1 Multiple Vulnerabilities
2009-08-28 00:00:00
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6121)
2011-01-27 00:00:00
openSUSE Security Update : acroread (acroread-689)
2009-07-21 00:00:00
gentoo
gentoo
Adobe Reader: User-assisted execution of arbitrary code
2009-04-18 00:00:00
suse
suse
remote code execution in acroread
2009-03-27 15:24:52
redhat
redhat
(RHSA-2008:0974) Critical: acroread security update
2008-11-12 00:00:00
thn
thn
Phoenix Exploit's Kit 2.8 mini version
2011-10-12 17:41:00