CVE-2009-1492: Critical severity adobe acrobat reader vulnerability
The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1492?
CVE-2009-1492 has a high severity rating due to its potential for remote code execution and denial of service.
How do I fix CVE-2009-1492?
To mitigate CVE-2009-1492, users should update Adobe Reader and Acrobat to the latest versions that address this vulnerability.
What software is affected by CVE-2009-1492?
CVE-2009-1492 affects Adobe Reader and Acrobat versions 7.1.1, 8.1.4, and 9.1, as well as earlier versions.
What kind of attacks can CVE-2009-1492 facilitate?
CVE-2009-1492 can allow attackers to execute arbitrary code or cause denial of service through specially crafted PDF files.
Is CVE-2009-1492 still relevant today?
While CVE-2009-1492 was discovered in 2009, users of affected versions are still at risk if they haven't updated their software.