VULNERABILITY INTELLIGENCE
CVE-2009-0193
CVSS score9.3 HIGH
EPSS probability9.59%
CISA KEVNot currently listed
Published2009-03-25
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a PDF file with a malformed JBIG2 symbol dictionary segment, a different vulnerability than CVE-2009-1061 and CVE-2009-1062.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- PSIRT-CNA@flexerasoftware.com — Mailing List, Third Party Advisory
- PSIRT-CNA@flexerasoftware.com — Mailing List, Third Party Advisory
- PSIRT-CNA@flexerasoftware.com — Third Party Advisory
- PSIRT-CNA@flexerasoftware.com — Third Party Advisory
- PSIRT-CNA@flexerasoftware.com — Third Party Advisory
- PSIRT-CNA@flexerasoftware.com — Third Party Advisory
- PSIRT-CNA@flexerasoftware.com — Third Party Advisory
- PSIRT-CNA@flexerasoftware.com — Third Party Advisory
- PSIRT-CNA@flexerasoftware.com — Broken Link
- PSIRT-CNA@flexerasoftware.com — Patch, Vendor Advisory
- PSIRT-CNA@flexerasoftware.com — Third Party Advisory
- PSIRT-CNA@flexerasoftware.com — Third Party Advisory, VDB Entry