Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2009-1493

Description

The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument.

POC

Reference

- http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt

- https://www.exploit-db.com/exploits/8570

Github

- https://github.com/0xCyberY/CVE-T4PDF

- https://github.com/ARPSyndicate/cvemon