CVE-2009-0928: Adobe Acrobat

High severity, CVSS 10.0. EPSS: 10.2% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table.

Affected products

• Adobe Acrobat: up to and including 9.0; version 3.0 only; version 3.1 only; version 4.0 only; version 4.0.5 only; version 4.0.5a only; …
• Adobe Acrobat Reader: up to and including 9.0; version 3.0 only; version 3.01 only; version 3.02 only; version 4.0 only; version 4.0.5 only; …

Published 2009-03-25. Last modified 2026-06-16.