CVE-2009-0658: adobe acrobat

Modified

Published 20-02-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-0658 is a high (CVSS 9.3) vulnerability in adobe acrobat. EPSS estimates a 87.83% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 6 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 25-09-2010)

Source freshness unavailable

How is this decided?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

87.83%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits6exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 1

RHSA-2009:0376

Timeline

20-02-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E.

CVSS metrics

2 scores · 1 source · 2 versions

v3.17.8v2.09.3

EPSS trend

Probability

87.83%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 87.83% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

6 found

exploit-databasedoswindowsVerified
Multiple PDF Readers - JBIG2 Local Buffer Overflow (PoC)
Maturity: poc
exploit-databasedoswindowsVerified
Adobe Acrobat Reader - JBIG2 Local Buffer Overflow (PoC) (2)
Maturity: poc
exploit-databaselocalwindowsVerified
Adobe - JBIG2Decode Memory Corruption (Metasploit) (1)
Maturity: weaponized

Show all 6 exploits

exploit-databaselocalwindowsVerified
Adobe - JBIG2Decode Memory Corruption (Metasploit) (2)
Maturity: weaponized
MetasploitremoteVerified
Adobe JBIG2Decode Heap Corruption
exploit/windows/browser/adobe_jbig2decode
Maturity: weaponized
MetasploitremoteVerified
Adobe JBIG2Decode Memory Corruption
exploit/windows/fileformat/adobe_jbig2decode
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Adobe2 products

acrobat≥ 7.0, ≤ 7.1.1 | ≥ 8.0, ≤ 8.1.4 | 9.0
acrobat_reader≥ 7.0, ≤ 7.1.1 | ≥ 8.0, ≤ 8.1.4 | 9.0

1 vendor · 2 products

References

26 links

www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219X Refsource MISCThird Party Advisory
secunia.com/advisories/34790Third Party AdvisoryX Refsource SECUNIA
www.adobe.com/support/security/bulletins/apsb09-04.htmlX Refsource CONFIRMVendor Advisory
www.exploit-db.com/exploits/8099ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5697VDB EntrySignatureX Refsource OVALTool Signature
isc.sans.org/diary.html?n&storyid=5902X Refsource MISCThird Party Advisory
www.us-cert.gov/cas/techalerts/TA09-051A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.adobe.com/support/security/advisories/apsa09-01.htmlX Refsource CONFIRMVendor Advisory
osvdb.org/52073VDB EntryX Refsource OSVDBBroken Link
secunia.com/advisories/34490Third Party AdvisoryX Refsource SECUNIA

Show all 26 references

secunia.com/advisories/33901Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2009-0376.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.symantec.com/security_response/writeup.jsp?docid=2009-021212-5523-99&tabid=2X Refsource MISCThird Party Advisory
secunia.com/advisories/34392Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
secunia.com/advisories/34706Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/0472Third Party AdvisoryX Refsource FRSIRT
www.kb.cert.org/vuls/id/905281Third Party AdvisoryX Refsource CERT VNUS Government Resource
sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1Vendor AdvisoryX Refsource SUNALERTThird Party Advisory
www.securityfocus.com/bid/33751VDB EntryX Refsource BIDThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/48825VDB EntryX Refsource XF
www.securitytracker.com/id?1021739VDB EntryX Refsource SECTRACKThird Party Advisory
www.exploit-db.com/exploits/8090ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
security.gentoo.org/glsa/glsa-200904-17.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.vupen.com/english/advisories/2009/1019VDB EntryX Refsource VUPENThird Party Advisory