Adobe Reader 'getAnnots()' JavaScript Function Remote Code Execution Vulnerability

Bugtraq ID: 34736
Class: Boundary Condition Error
CVE: CVE-2009-1492
Remote: Yes
Local: No
Published: Apr 27 2009 12:00AM
Updated: Jul 13 2009 07:46PM
Credit: Arr1val
Vulnerable: SuSE SUSE Linux Enterprise Server 11 DEBUGINFO
SuSE SUSE Linux Enterprise Server 11
SuSE SUSE Linux Enterprise Desktop 10 SP2
SuSE SUSE Linux Enterprise 11
SuSE SUSE Linux Enterprise 10
Sun Solaris 10.0
S.u.S.E. openSUSE 11.1
S.u.S.E. openSUSE 11.0
S.u.S.E. openSUSE 10.3
RedHat Enterprise Linux WS Extras 4
RedHat Enterprise Linux WS Extras 3
RedHat Enterprise Linux Extras 4
RedHat Enterprise Linux Extras 3
RedHat Enterprise Linux ES Extras 4
RedHat Enterprise Linux ES Extras 3
RedHat Enterprise Linux AS Extras 4
RedHat Enterprise Linux AS Extras 3
RedHat Desktop Extras 4
RedHat Desktop Extras 3
Red Hat Enterprise Linux Supplementary 5 server
Red Hat Enterprise Linux Desktop Supplementary 5 client
Nortel Networks Self-Service Speech Server 0
Nortel Networks Self-Service Peri Application 0
Nortel Networks Self-Service MPS 500 0
Nortel Networks Self-Service MPS 1000 0
Gentoo Linux
Avaya Interactive Response 4.0
Avaya Interactive Response 3.0
Adobe Reader 8.1.4
Adobe Reader 8.1.3
Adobe Reader 8.1.2
Adobe Reader 8.1.1
Adobe Reader 7.1.1
Adobe Reader 7.0.9
Adobe Reader 7.0.9
Adobe Reader 7.0.8
Adobe Reader 7.0.8
Adobe Reader 7.0.7
Adobe Reader 7.0.6
Adobe Reader 7.0.5
Adobe Reader 7.0.4
Adobe Reader 7.0.3
Adobe Reader 7.0.2
Adobe Reader 7.0.1
Adobe Reader 7.0
Adobe Reader 9.1
Adobe Reader 9
Adobe Reader 8.1.2 Security Updat
Adobe Reader 8.1
Adobe Reader 8.0
Adobe Reader 7.1
Not Vulnerable: Adobe Reader 9.1.1
Adobe Reader 8.1.5
Adobe Reader 7.1.2


 

Privacy Statement
Copyright 2010, SecurityFocus