CVE-2009-1492 : The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1,

The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments.

Published 2009-04-30 20:30:01

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory CorruptionExecute codeDenial of service

Products affected by CVE-2009-1492

Adobe » Acrobat Reader
Versions from including (>=) 9.0 and up to, including, (<=) 9.1
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Matching versions
Adobe » Acrobat Reader
Versions from including (>=) 8.0 and up to, including, (<=) 8.1.4
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Matching versions
Adobe » Acrobat Reader
Versions from including (>=) 7.0 and up to, including, (<=) 7.1.1
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Matching versions
Adobe » Acrobat
Versions from including (>=) 8.0 and up to, including, (<=) 8.1.4
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Matching versions
Adobe » Acrobat
Versions from including (>=) 9.0 and up to, including, (<=) 9.1
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Matching versions
Adobe » Acrobat
Versions from including (>=) 7.0 and up to, including, (<=) 7.1.1
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2009-1492

EPSS FAQ

66.96%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-1492

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2009-1492

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-1492

http://osvdb.org/54130

Broken Link
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html

[security-announce] SUSE Security Announcement: Acrobat Reader (SUSE-SA:2009:027) - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/34924

About Secunia Research | Flexera
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/34736

Exploit;Third Party Advisory;VDB Entry
http://www.adobe.com/support/security/bulletins/apsb09-06.html

Adobe Security Bulletins and Advisories
Vendor Advisory

CVEs referencing this url
http://secunia.com/advisories/35096

About Secunia Research | Flexera
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/35358

About Secunia Research | Flexera
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/35734

About Secunia Research | Flexera
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/35055

About Secunia Research | Flexera
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html

[security-announce] SUSE Security Summary Report: SUSE-SR:2009:011 - openSUSE Security Announce - openSUSE Mailing Lists
Mailing List;Third Party Advisory

CVEs referencing this url
http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1

Broken Link

CVEs referencing this url
http://www.vupen.com/english/advisories/2009/1189

Webmail: access your OVH emails on ovhcloud.com | OVHcloud UK
Third Party Advisory

CVEs referencing this url
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953

Third Party Advisory

CVEs referencing this url
http://security.gentoo.org/glsa/glsa-200907-06.xml

Adobe Reader: User-assisted execution of arbitrary code (GLSA 200907-06) — Gentoo security
Third Party Advisory

CVEs referencing this url
http://www.vupen.com/english/advisories/2009/1317

Webmail: access your OVH emails on ovhcloud.com | OVHcloud UK
Third Party Advisory

CVEs referencing this url
http://www.us-cert.gov/cas/techalerts/TA09-133B.html

Adobe Reader and Acrobat JavaScript Vulnerabilities | CISA
Third Party Advisory;US Government Resource

CVEs referencing this url
http://www.kb.cert.org/vuls/id/970180

VU#970180 - Adobe Reader and Acrobat customDictionaryOpen() and getAnnots() JavaScript vulnerabilities
Third Party Advisory;US Government Resource

CVEs referencing this url
http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html

Fastly error: unknown domain blogs.adobe.com
Vendor Advisory

CVEs referencing this url
http://secunia.com/advisories/35416

About Secunia Research | Flexera
Third Party Advisory

CVEs referencing this url
http://secunia.com/advisories/35152

About Secunia Research | Flexera
Third Party Advisory

CVEs referencing this url
http://www.redhat.com/support/errata/RHSA-2009-0478.html

Support
Third Party Advisory

CVEs referencing this url
http://blogs.adobe.com/psirt/2009/04/potential_adobe_reader_issue.html

Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50145

Third Party Advisory;VDB Entry
http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt

Top Linux News, Advisories, How-tos, and Feature Releases
Exploit;Third Party Advisory
http://www.securitytracker.com/id?1022139

GoDaddy Domain Name Search
Third Party Advisory;VDB Entry

CVEs referencing this url
http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html

Fastly error: unknown domain blogs.adobe.com
Vendor Advisory

CVEs referencing this url
https://www.exploit-db.com/exploits/8569

Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2009-1492

Products affected by CVE-2009-1492

Exploit prediction scoring system (EPSS) score for CVE-2009-1492

CVSS scores for CVE-2009-1492

CWE ids for CVE-2009-1492

References for CVE-2009-1492