CVE - CVE-2009-1492

CVE-ID
CVE-2009-1492	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
EXPLOIT-DB:8569 URL:https://www.exploit-db.com/exploits/8569 MISC:http://blogs.adobe.com/psirt/2009/04/potential_adobe_reader_issue.html MISC:http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt CONFIRM:http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html CONFIRM:http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html CONFIRM:http://www.adobe.com/support/security/bulletins/apsb09-06.html CONFIRM:http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953 GENTOO:GLSA-200907-06 URL:http://security.gentoo.org/glsa/glsa-200907-06.xml REDHAT:RHSA-2009:0478 URL:http://www.redhat.com/support/errata/RHSA-2009-0478.html SUNALERT:259028 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1 SUSE:SUSE-SA:2009:027 URL:http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html SUSE:SUSE-SR:2009:011 URL:http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html CERT:TA09-133B URL:http://www.us-cert.gov/cas/techalerts/TA09-133B.html CERT-VN:VU#970180 URL:http://www.kb.cert.org/vuls/id/970180 BID:34736 URL:http://www.securityfocus.com/bid/34736 OSVDB:54130 URL:http://osvdb.org/54130 SECTRACK:1022139 URL:http://www.securitytracker.com/id?1022139 SECUNIA:34924 URL:http://secunia.com/advisories/34924 SECUNIA:35096 URL:http://secunia.com/advisories/35096 SECUNIA:35055 URL:http://secunia.com/advisories/35055 SECUNIA:35152 URL:http://secunia.com/advisories/35152 SECUNIA:35358 URL:http://secunia.com/advisories/35358 SECUNIA:35416 URL:http://secunia.com/advisories/35416 SECUNIA:35734 URL:http://secunia.com/advisories/35734 VUPEN:ADV-2009-1189 URL:http://www.vupen.com/english/advisories/2009/1189 VUPEN:ADV-2009-1317 URL:http://www.vupen.com/english/advisories/2009/1317 XF:reader-getannots-code-execution(50145) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/50145
Assigning CNA
N/A
Date Entry Created
20090430	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20090430)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org