NetSight
IP …
critical9.3Public exploit code

CVE-2009-1492

The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments.

Affected products

VendorProductAffected versions
AdobeAcrobat
from 7.0 through 7.1.1
from 8.0 through 8.1.4
from 9.0 through 9.1
AdobeAcrobat Reader
from 7.0 through 7.1.1
from 8.0 through 8.1.4
from 9.0 through 9.1

Weakness classification

CWE-399

References