CVE-2009-0927: Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 96.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.

Affected products

• Adobe Acrobat Reader: from 7.0, before 7.1.1 (fixed in 7.1.1); from 8.0, before 8.1.3 (fixed in 8.1.3); from 9.0, before 9.1 (fixed in 9.1)

Published 2009-03-19. Last modified 2026-06-16.