Description
The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | acroread +1 | 8.1.6-2.el5 | RHSA-2009:1109 |
| RHEL 4 | acroread +1 | 8.1.6-1.el4 | RHSA-2009:1109 |
| RHEL 3 | acroread +1 | 8.1.6-1 | RHSA-2009:1109 |
Advisories 1
- RHSA-2009:1109 Red Hat Security Advisory: acroread security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 35274 vdb-entry
- ADV-2009-1547 vdb-entry
- 35655 third-party-advisory
- TA09-161A third-party-advisory
- 35734 third-party-advisory
- acrobat-reader-jbig2-code-execution(51016) vdb-entry
- RHSA-2009:1109 vendor-advisory
- http://www.adobe.com/support/security/bulletins/apsb09-07.html
- 35298 vdb-entry
- SUSE-SA:2009:035 vendor-advisory
- 1022361 vdb-entry
- GLSA-200907-06 vendor-advisory
- 34580 third-party-advisory
- 35685 third-party-advisory
- SUSE-SR:2009:012 vendor-advisory
- 35496 third-party-advisory