VulnerabilityAnalyzed

CVE-2009-0927

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

KEVEXPLOIT ×4 ✓HIGH 8.8EPSS 96.6%

Does this matter?

Known to be exploited in the wild (CISA KEV, CISA remediation deadline 15 April 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.

Description

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.

CVSS 3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 96.63% probability · 100th percentile
Public exploits: 4 in Exploit-DB · verified · first 4 May 2009
CISA KEV: Listed 25 March 2022 · due 15 April 2022
Weakness: CWE-20, CWE-121
Affected: adobe/acrobat reader
Source: cve@mitre.org

EPSS trend

EPSS 96.6% since 30 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

CISA notes

Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2009-0927

Public exploits (4)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-ID	Title	Type	Published	Verified
EDB-16681 source ↗	Adobe - 'Collab.getIcon()' Local Buffer Overflow (Metasploit) (2)windows · Metasploit	local	25 September 2010	yes
EDB-16606 source ↗	Adobe - 'Collab.getIcon()' Local Buffer Overflow (Metasploit) (1)windows · Metasploit	local	30 April 2010	yes
EDB-9579 source ↗	Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universalwindows · kralor	local	3 September 2009	yes
EDB-8595 source ↗	Adobe Acrobat Reader 8.1.2 < 9.0 - 'getIcon()' Memory Corruptionwindows · Abysssec	local	4 May 2009	yes

References

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlMailing List, Third Party Advisory
http://secunia.com/advisories/34490Third Party Advisory
http://secunia.com/advisories/34706Third Party Advisory
http://secunia.com/advisories/34790Third Party Advisory
http://security.gentoo.org/glsa/glsa-200904-17.xmlThird Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1Broken Link
http://www.adobe.com/support/security/bulletins/apsb09-04.htmlPatch, Vendor Advisory
http://www.exploit-db.com/exploits/9579Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/502116/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/34169Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1021861Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2009/0770Third Party Advisory
http://www.vupen.com/english/advisories/2009/1019Third Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-09-014Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/49312Third Party Advisory, VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlMailing List, Third Party Advisory
http://secunia.com/advisories/34490Third Party Advisory
http://secunia.com/advisories/34706Third Party Advisory
http://secunia.com/advisories/34790Third Party Advisory
http://security.gentoo.org/glsa/glsa-200904-17.xmlThird Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1Broken Link
http://www.adobe.com/support/security/bulletins/apsb09-04.htmlPatch, Vendor Advisory
http://www.exploit-db.com/exploits/9579Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/502116/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/34169Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1021861Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2009/0770Third Party Advisory
http://www.vupen.com/english/advisories/2009/1019Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.