CVE-2009-1062: Adobe Acrobat

High severity, CVSS 9.3. EPSS: 6.2% chance of exploitation in the next 30 days.

Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different vulnerability than CVE-2009-0193 and CVE-2009-1061.

Affected products

• Adobe Acrobat: up to and including 9.0; version 7.0 only; version 7.0.1 only; version 7.0.2 only; version 7.0.3 only; version 7.0.4 only; …
• Adobe Acrobat Reader: up to and including 9.0; version 7.0 only
• Adobe Reader: version 3.0 only; version 4.0 only; version 4.0.5 only; version 4.0.5a only; version 4.0.5c only; version 4.5 only; …

Published 2009-03-25. Last modified 2026-06-16.