PT-2009-1114 · Adobe · Reader+1

Kralor · Published 2009-03-19 · Updated 2025-10-22 · CVE-2009-0927

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Reader and Adobe Acrobat versions 9.0 through 9.0, 8.0 through 8.1.2, and 7.0 through 7.1.0

Description The issue is caused by insufficient input validation in the Adobe Acrobat PDF editing program, allowing remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object.

Recommendations For Adobe Reader and Adobe Acrobat versions 9.0 through 9.0, update to version 9.1 or later. For Adobe Reader and Adobe Acrobat versions 8.0 through 8.1.2, update to version 8.1.3 or later. For Adobe Reader and Adobe Acrobat versions 7.0 through 7.1.0, update to version 7.1.1 or later.

Exploit

Fix

Stack Overflow

RCE

Weakness Enumeration

CWE-121

CWE-20

Related Identifiers

BDU:2021-04404

CVE-2009-0927

RHSA-2008:0974

Affected Products

Acrobat

Reader

References · 31

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_geticon.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/adobe_geticon.rb · Exploit
• 🔥 http://exploit-db.com/exploits/9579 · Exploit
• 🔥 https://exploit-db.com/exploits/16606 · Exploit
• 🔥 https://exploit-db.com/exploits/16681 · Exploit
• 🔥 https://exploit-db.com/exploits/8595 · Exploit
• 🔥 https://exploit-db.com/exploits/9579 · Exploit
• http://adobe.com/support/security/bulletins/apsb09-04.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04404 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200904-17.xml · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0927 · Security Note
• http://securityfocus.com/bid/34169 · Note