CVE-2009-0927
HIGH KEVAdobe Acrobat Reader 7.0-7.1.1 - Remote Code Execution via Collab.getIcon Method
Title source: llmExploitation Summary
CVE-2009-0927 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 25, 2022.
EIP tracks 6 public exploits from researchers including Metasploit, kralor, Abysssec, including a Metasploit module exploits/windows/browser/adobe_geticon.
AI-analyzed exploit summary This exploit leverages a buffer overflow in Adobe Reader/Acrobat via a malformed Collab.getIcon() call in a crafted PDF. It uses JavaScript heap spraying to achieve arbitrary code execution on vulnerable versions.
Description
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.
Exploits (6)
This exploit leverages a buffer overflow in Adobe Reader/Acrobat via a malformed Collab.getIcon() call in a crafted PDF. It uses JavaScript heap spraying to achieve arbitrary code execution on vulnerable versions.
This Metasploit module exploits a buffer overflow in Adobe Reader/Acrobat via a malformed Collab.getIcon() call in a crafted PDF. It uses JavaScript heap spraying to achieve arbitrary code execution.
This exploit targets CVE-2009-0927, a vulnerability in Adobe Reader's Collab.getIcon method, allowing arbitrary code execution via a maliciously crafted PDF. The PoC generates a PDF that triggers the vulnerability when opened.
This exploit targets a stack overflow vulnerability in Adobe Acrobat and Reader (versions 8.1.2 to 9.0) via malicious JavaScript in a PDF. The flaw occurs due to improper bounds checking in the getIcon() method of a Collab object, allowing arbitrary code execution.
This Metasploit module exploits a buffer overflow in Adobe Reader/Acrobat via a malformed Collab.getIcon() call in a crafted PDF. It uses JavaScript heap spraying to achieve arbitrary code execution on vulnerable versions.
This Metasploit module exploits a buffer overflow in Adobe Reader/Acrobat via a malformed Collab.getIcon() call in a crafted PDF, achieving arbitrary code execution through JavaScript heap spraying.
References (17)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H