CVE-2009-0927

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

8.8
CVSS 3.1
96.6 %
EPSS (current)
2022-03-25
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Adobe / Reader and Acrobat

Published: 2009-03-19 · Due (CISA): 2022-04-15

CWE: CWE-20 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
metasploitexploit/windows/browser/adobe_geticonexploit/windows/browser/adobe_geticon2009-03-24
metasploitexploit/windows/fileformat/adobe_geticonexploit/windows/fileformat/adobe_geticon2009-03-24
exploitdb8595Adobe Acrobat Reader 8.1.2 < 9.0 - 'getIcon()' Memory Corruption2009-05-04
exploitdb9579Adobe Acrobat/Reader < 7.1.1/8.1.3/9.1 - Collab getIcon Universal2009-09-03
exploitdb16606Adobe - 'Collab.getIcon()' Local Buffer Overflow (Metasploit) (1)2010-04-30
exploitdb16681Adobe - 'Collab.getIcon()' Local Buffer Overflow (Metasploit) (2)2010-09-25

References only — no downloads or instructions.

Sources