CVE-2009-0658

7.8 highEPSS 88%

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 88% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2009-02-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

adobe:acrobat
adobe:acrobat_reader

References

http://isc.sans.org/diary.html?n&storyid=5902
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
http://osvdb.org/52073
http://secunia.com/advisories/33901

Check your stack JSON