CVE-2009-0927
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
Published Mar 19, 2009 · updated Jun 16, 2026 · adobe acrobat reader
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
Timeline
Detection, updates, and resolution for this record.
Mar 19, 2009 · Catalog
Detected
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
Mar 25, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 15, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
Required action
Apply updates per vendor instructions.
CISA due date Apr 15, 2022
Affected
- cpe adobe/acrobat readerversion unspecified
- vendor Adobe Reader and Acrobatversion unspecified
Sources
- CISA KEVCVE-2009-0927
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.
cisa.gov - CVE.orgCVE-2009-0927
Official CVE identifier
cve.org - FIRST EPSSCVE-2009-0927
30-day exploitation probability 96.6%
first.org - Exploit Database16606
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database16681
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database8595
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_windows/browser/adobe_geticon
Public module reference (good). Module source is not copied into this catalog.
rapid7.com - Metasploit Modulesexploit_windows/fileformat/adobe_geticon
Public module reference (good). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2009-0927
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
nvd.nist.gov