cve/2009/CVE-2009-1493.md

CVE-2009-1493

Description

The customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1, and earlier on Linux and UNIX allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that triggers a call to this method with a long string in the second argument.

POC

Reference

• http://packetstorm.linuxsecurity.com/0904-exploits/spell.txt
• https://www.exploit-db.com/exploits/8570

Github

• https://github.com/0xCyberY/CVE-T4PDF
• https://github.com/ARPSyndicate/cvemon