CVE-2009-0928

high · 10

Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table.

CVSS

10.2%

EPSS (exploit prob.)

95th

EPSS percentile

2009-03-25

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
adobe	acrobat	<= 9.0
adobe	acrobat	3.0
adobe	acrobat	3.1
adobe	acrobat	4.0
adobe	acrobat	4.0.5
adobe	acrobat	4.0.5a
adobe	acrobat	4.0.5c
adobe	acrobat	5.0
adobe	acrobat	5.0.5
adobe	acrobat	5.0.6
adobe	acrobat	5.0.10
adobe	acrobat	6.0
adobe	acrobat	6.0.1
adobe	acrobat	6.0.2
adobe	acrobat	6.0.3
adobe	acrobat	6.0.4
adobe	acrobat	6.0.5
adobe	acrobat	6.0.6
adobe	acrobat	7.0
adobe	acrobat	7.0.1
adobe	acrobat	7.0.2
adobe	acrobat	7.0.3
adobe	acrobat	7.0.4
adobe	acrobat	7.0.5
adobe	acrobat	7.0.6
adobe	acrobat	7.0.7
adobe	acrobat	7.0.8
adobe	acrobat	7.0.9
adobe	acrobat	7.1.0
adobe	acrobat	7.1.1
adobe	acrobat	7.1.2
adobe	acrobat	7.1.3
adobe	acrobat	7.1.4
adobe	acrobat	8.0
adobe	acrobat	8.1
adobe	acrobat	8.1.1
adobe	acrobat	8.1.2
adobe	acrobat	8.1.3
adobe	acrobat	8.1.4
adobe	acrobat	8.1.5

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-0928