CVE-2009-0927

Adobe Reader and Acrobat contained a stack-based buffer overflow allowing remote attackers to execute arbitrary code.

This stack-based buffer overflow in Adobe Reader and Acrobat allowed remote attackers to execute arbitrary code, representing a critical RCE vulnerability. DIB organizations must ensure these products are patched immediately, as Adobe has a high-risk track record of repeated critical RCE vulnerabilities in its Acrobat and Reader products. Failure to patch exposes systems to remote code execution, which can lead to data breaches, ransomware, and compliance violations.

Shame score — Adobe repeatedly ships critical RCE vulnerabilities in widely deployed products, demonstrating a pattern of negligence and a high-risk track record that shreds trust.