Explain CVE-2009-1492
The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments.
Affected Products: n/a
References: [{'name': '8569', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/8569'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=926953'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blogs.adobe.com/psirt/2009/04/potential_adobe_reader_issue.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html'}, {'name': '35734', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35734'}, {'name': 'TA09-133B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA09-133B.html'}, {'name': 'ADV-2009-1189', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1189'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/security/bulletins/apsb09-06.html'}, {'name': 'SUSE-SR:2009:011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt'}, {'name': 'GLSA-200907-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200907-06.xml'}, {'name': '259028', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-66-259028-1'}, {'name': 'SUSE-SA:2009:027', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html'}, {'name': '34924', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/34924'}, {'name': 'ADV-2009-1317', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2009/1317'}, {'name': '1022139', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1022139'}, {'name': '35358', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35358'}, {'name': '35055', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35055'}, {'name': 'VU#970180', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/970180'}, {'name': '54130', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/54130'}, {'name': '35416', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35416'}, {'name': 'RHSA-2009:0478', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2009-0478.html'}, {'name': '35096', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35096'}, {'name': '35152', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/35152'}, {'name': '34736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/34736'}, {'name': 'reader-getannots-code-execution(50145)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/50145'}]
CVE State: PUBLISHED