CVE-2009-0658

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 87.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-02-20 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E.

Affected products

Adobe Acrobat for Edge: from 7.0 through 7.1.1; from 8.0 through 8.1.4; 9.0
Adobe Acrobat Reader: from 7.0 through 7.1.1; from 8.0 through 8.1.4; 9.0

References

http://isc.sans.org/diary.html?n&storyid=5902
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
http://osvdb.org/52073
http://secunia.com/advisories/33901
http://secunia.com/advisories/34392
http://secunia.com/advisories/34490
http://secunia.com/advisories/34706
http://secunia.com/advisories/34790
http://security.gentoo.org/glsa/glsa-200904-17.xml
http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1
http://www.adobe.com/support/security/advisories/apsa09-01.html

Get alerted when CVE-2009-0658 or the next vulnerability affects your stack