Lucene search

MitreCVE-2009-0658

HistoryFeb 20, 2009 - 7:30 p.m.

CVE-2009-0658

2009-02-2019:30:00

CWE-119

mitre

web.nvd.nist.gov

In Wild

cve-2009-0658

adobe

reader

acrobat

buffer overflow

remote code execution

pdf

security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0.972

Percentile

99.8%

JSON

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E.

Affected configurations

Nvd

Node

adobeacrobatRange7.0–7.1.1

adobeacrobatRange8.0–8.1.4

adobeacrobatMatch9.0

adobeacrobat_readerRange7.0–7.1.1

adobeacrobat_readerRange8.0–8.1.4

adobeacrobat_readerMatch9.0

VendorProductVersionCPE
adobeacrobat*cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
adobeacrobat9.0cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*
adobeacrobat_reader*cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
adobeacrobat_reader9.0cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	acrobat	*	cpe:2.3:a:adobe:acrobat::::::::
adobe	acrobat	9.0	cpe:2.3:a:adobe:acrobat:9.0:::::::*
adobe	acrobat_reader	*	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader	9.0	cpe:2.3:a:adobe:acrobat_reader:9.0:::::::*