CVE-2009-0927
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
Published Mar 19, 2009 · updated Jun 16, 2026 · adobe acrobat reader
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 19, 2009 · Catalog
Detected
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
Mar 25, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 15, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
Required action
Apply updates per vendor instructions.
CISA due date Apr 15, 2022
Affected
- cpe adobe/acrobat readerversion unspecified
- vendor Adobe Reader and Acrobatversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2009-0927
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.
cisa.gov - CVE.orgVulnerability recordCVE-2009-0927
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2009-0927
30-day exploitation probability 96.6%
first.org - Exploit DatabasePublic exploit reference16606
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit DatabasePublic exploit reference16681
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit DatabasePublic exploit reference8595
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit ModulesPublic exploit moduleexploit_windows/browser/adobe_geticon
Public module reference (good). Module source is not copied into this catalog.
rapid7.com - Metasploit ModulesPublic exploit moduleexploit_windows/fileformat/adobe_geticon
Public module reference (good). Module source is not copied into this catalog.
rapid7.com - NIST NVDVulnerability recordCVE-2009-0927
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
nvd.nist.gov