CVE-2009-1492
The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 25.5%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 25.52% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- adobe/acrobat · adobe/acrobat reader
- Source
- cve@mitre.org
References
- http://blogs.adobe.com/psirt/2009/04/potential_adobe_reader_issue.htmlVendor Advisory
- http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.htmlVendor Advisory
- http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.htmlVendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.htmlMailing List, Third Party Advisory
- http://osvdb.org/54130Broken Link
- http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txtExploit, Third Party Advisory
- http://secunia.com/advisories/34924Third Party Advisory
- http://secunia.com/advisories/35055Third Party Advisory
- http://secunia.com/advisories/35096Third Party Advisory
- http://secunia.com/advisories/35152Third Party Advisory
- http://secunia.com/advisories/35358Third Party Advisory
- http://secunia.com/advisories/35416Third Party Advisory
- http://secunia.com/advisories/35734Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200907-06.xmlThird Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1Broken Link
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953Third Party Advisory
- http://www.adobe.com/support/security/bulletins/apsb09-06.htmlVendor Advisory
- http://www.kb.cert.org/vuls/id/970180Third Party Advisory, US Government Resource
- http://www.redhat.com/support/errata/RHSA-2009-0478.htmlThird Party Advisory
- http://www.securityfocus.com/bid/34736Exploit, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1022139Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA09-133B.htmlThird Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2009/1189Third Party Advisory
- http://www.vupen.com/english/advisories/2009/1317Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50145Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/8569Third Party Advisory, VDB Entry
- http://blogs.adobe.com/psirt/2009/04/potential_adobe_reader_issue.htmlVendor Advisory
- http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.htmlVendor Advisory
- http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.