CVE-2009-1493: Medium severity adobe acrobat reader vulnerability
The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1493?
CVE-2009-1493 is classified as a medium severity vulnerability that can lead to denial of service or arbitrary code execution.
How do I fix CVE-2009-1493?
To fix CVE-2009-1493, users should upgrade to the latest version of Adobe Reader that addresses this vulnerability.
Which versions are affected by CVE-2009-1493?
CVE-2009-1493 affects Adobe Reader versions 7.1.1, 8.1.4, and 9.1 on Linux and UNIX systems.
What type of attack does CVE-2009-1493 allow?
CVE-2009-1493 allows remote attackers to perform a denial of service attack or potentially execute arbitrary code via specially crafted PDF files.
Is this vulnerability present in later versions of Adobe Reader beyond 9.1?
No, CVE-2009-1493 is not present in later versions of Adobe Reader that have been patched after version 9.1.