CVE-2009-0193: Adobe Acrobat Reader

High severity, CVSS 9.3. EPSS: 9.6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a PDF file with a malformed JBIG2 symbol dictionary segment, a different vulnerability than CVE-2009-1061 and CVE-2009-1062.

Affected products

• Adobe Acrobat Reader: from 7.0, before 7.1.1 (fixed in 7.1.1); from 8.0, before 8.1.4 (fixed in 8.1.4); from 9.0, before 9.1 (fixed in 9.1)

Published 2009-03-25. Last modified 2026-06-16.