CVE-2009-1492
CVSS Score Not Available
68.06%
MEDIUM RiskEPSS (99th percentile)
The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments.
Published: 4/30/2009
Modified: 4/9/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
68.06%MEDIUM Exploitation Risk
99th percentile
This vulnerability has a 68.06% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.