CVEs-PoC/2009/CVE-2009-1492.md

CVE-2009-1492

Description

The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments.

POC

Reference

• http://packetstorm.linuxsecurity.com/0904-exploits/getannots.txt
• https://www.exploit-db.com/exploits/8569

Github

• https://github.com/0xCyberY/CVE-T4PDF
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Abdibimantara/GetPDF_Cyberdefender