CVE-2009-0658

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

87.83% chance of exploitation in the next 30 days, 100th percentile

Published

2009-02-20

Updated

2024-08-07

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/8090

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_jbig2decod…

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/16672
• https://www.exploit-db.com/exploits/16593
• https://www.exploit-db.com/exploits/8099

References

• CVE Record
• NVD entry

Related

• CVE-2009-0650
• CVE-2009-0659
• CVE-2009-0649
• CVE-2009-0672
• CVE-2009-0646
• CVE-2009-0673