Adobe Reader DC 15.010.20060 – Memory Corruption

• Exploit Database
• 118 阅读

• 作者： Pier-Luc Maltais
  日期： 2016-05-10
• 类别：

  • dos
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/39799/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50

  ########################################################################################   # Title: Adobe Reader DC <= 15.010.20060 - Memory corruption # Application: Adobe Reader DC # Version: 15.010.20060 and earlier versions # Platform: Windows and Macintosh # Software Link: https://acrobat.adobe.com/ca/fr/acrobat/pdf-reader.html # Date: May 10, 2016 # CVE: CVE-2016-1077 # Author: Pier-Luc Maltais from COSIG # Contact: https://twitter.com/COSIG_ # Personal contact: https://twitter.com/plmaltais   ########################################################################################   =================== Introduction: =================== More powerful than other PDF software, Adobe Acrobat Reader DC is the free, trusted standard for viewing, printing and annotating PDFs. And now, it’s connected to Adobe Document Cloud — so it’s easier than ever to work with PDFs on computers and mobile devices. (https://acrobat.adobe.com/ca/en/acrobat/pdf-reader.html) ########################################################################################   =================== Report Timeline: =================== 2016-02-04: Pier-Luc Maltais from COSIG found the issue and report it to Adobe PSIRT. 2016-05-10: Vendor fixed the issue (APSB16-14). 2016-03-08: Release of this advisory. ########################################################################################   =================== Technical details: =================== A memory corruption occurs when Adobe Reader DC handle a specially crafted image XObject, which could lead to remote code execution.   ########################################################################################   ========== POC: ========== https://plmsecurity.net/sites/plmsecurity.net/files/APSB16-14_PoC.pdf https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39799.zip   ########################################################################################