Login Request a demo
Unscored severity · published Apr 30, 2009
CVE-2009-1493
The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service…
–
CVSS
21.8%
EPSS
No
On KEV
Description
The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument.
Exploitation
Is it being used?
Exploit prediction (EPSS)21.8% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Reader · Adobe
8.1.4; 9.1 · source: NVD
Affected product
RE
Reader
Adobe
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1493
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1493
Vendor Advisory
http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html
Third Party Advisory
http://blogs.adobe.com/psirt/2009/05/adobe_reader_issue_update.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00001.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
Broken Link
http://osvdb.org/54129
Exploit
http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt
More from Reader
8.8
CVE-2011-0611
Adobe Flash Player Remote Code Execution Vulnerability
7.8
CVE-2013-0641
Adobe Reader Buffer Overflow Vulnerability
10.0
CVE-2016-1044
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and…
10.0
CVE-2016-1041
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and…
10.0
CVE-2016-1038
Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and…