CVE-2009-0658: Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to ex...

Security readout for executives and security teams

CVE-2009-0658 is a remote code execution flaw in Adobe Reader and Acrobat 9.0 and earlier. A malicious PDF could compromise a workstation when opened. The source bundle says it was exploited in the wild in February 2009 by Trojan.Pidief.E, so legacy installations should be treated as urgent risk. Exposure is mainly endpoints, servers, or packaged applications still running Adobe Reader or Acrobat 9.0 or earlier. Modern environments are exposed only if legacy Adobe PDF components remain installed or bundled. Prioritize remediation if any legacy Adobe Reader or Acrobat versions remain. This is old but serious: exploitation required only a crafted PDF, and historical in-the-wild attacks are documented in the source bundle. Mitigation focus: Inventory Adobe Reader and Acrobat versions across managed systems.; Upgrade or remove Adobe Reader and Acrobat 9.0 and earlier.; Apply vendor guidance from Adobe APSB09-04 and relevant OS vendor advisories..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.