CVE-2009-0193

Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a PDF…

published March 25, 2009

CVSS
—
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

⚠️ A classic buffer overflow is hiding here! This vulnerability in Adobe Acrobat Reader allows an attacker to execute arbitrary code just by sending a cleverly crafted PDF file. 📄🔓 Think of it like a pizza delivery where the delivery person brings an extra-large pizza without checking the order. If the customer is allergic to mushrooms, they could be in for a nasty surprise! In this case, the malformed JBIG2 symbol dictionary in a PDF is that unexpected ingredient. An attacker could gain control of the victim's machine, leading to potentially devastating consequences—like stealing sensitive data or installing malware without the user even realizing it! The ability to execute arbitrary code makes this a serious concern for any user of outdated versions of Adobe Acrobat Reader.

Put simply

Think of it like a pizza delivery where the delivery person brings an extra-large pizza without checking the order. If the customer is allergic to mushrooms, they could be in for a nasty surprise! In this case, the malformed JBIG2 symbol dictionary in a PDF is that unexpected ingredient. This vulnerability occurs due to a heap-based buffer overflow in specific versions of Adobe Acrobat Reader, allowing a specially crafted PDF file to manipulate memory and execute arbitrary code when opened.

What to do

An attacker could gain control of the victim's machine, leading to potentially devastating consequences—like stealing sensitive data or installing malware without the user even realizing it! The ability to execute arbitrary code makes this a serious concern for any user of outdated versions of Adobe Acrobat Reader. To protect yourself, update Adobe Acrobat Reader to at least version 9.1, 8.1.4, or 7.1.1. Ensure that you regularly check for software updates to keep your applications secure. 🔄 You've got this! Keep your software up to date and stay safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09595 · 95.5th percentile
Published
2009-03-25T01:00Z
EPSS history
Timeline
  • 25 MAR 01:00Z
    Heap-based buffer overflow in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a PDF…
    cvelistv5