CVE-2009-0658

Published: Feb 20, 2009Modified: Apr 23, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E.

Affected (6)

Products: Adobe: Acrobat, Acrobat Reader

Adobe

2 products

Acrobat

Acrobat Reader

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat	From 7.0 to 7.1.1
Adobe Acrobat	From 8.0 to 8.1.4
Adobe Acrobat	Version 9.0
Adobe Acrobat Reader	From 7.0 to 7.1.1
Adobe Acrobat Reader	From 8.0 to 8.1.4
Adobe Acrobat Reader	Version 9.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (52)

http://isc.sans.org/diary.html?n&storyid=5902

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html

Source: cve@mitre.org

Third Party Advisory

http://osvdb.org/52073

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/33901

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/34392

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/34490

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/34706

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/34790

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200904-17.xml

Source: cve@mitre.org

Third Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-66-256788-1

Source: cve@mitre.org

Third Party Advisory

http://www.adobe.com/support/security/advisories/apsa09-01.html

Source: cve@mitre.org

Vendor Advisory

http://www.adobe.com/support/security/bulletins/apsb09-04.html

Source: cve@mitre.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/905281

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.redhat.com/support/errata/RHSA-2009-0376.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/33751

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1021739

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219

Source: cve@mitre.org

Third Party Advisory

http://www.symantec.com/security_response/writeup.jsp?docid=2009-021212-5523-99&tabid=2

Source: cve@mitre.org

Third Party Advisory

http://www.us-cert.gov/cas/techalerts/TA09-051A.html

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2009/0472

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2009/1019

Source: cve@mitre.org

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/48825

Source: cve@mitre.org

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5697

Source: cve@mitre.org

Tool Signature

https://www.exploit-db.com/exploits/8090

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/8099

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://isc.sans.org/diary.html?n&storyid=5902