CVE-2010-3654

This exploit leverages a type confusion vulnerability in Adobe Flash Player to bypass DEP and ASLR on Windows 7. It uses multiple stages to leak memory addresses and execute a ROP payload, ultimately achieving remote code execution.

This Metasploit module exploits CVE-2010-3654, a vulnerability in Adobe Flash Player (versions 9.x and 10.0) and Adobe Reader/Acrobat. It embeds a malicious SWF file in a PDF, using AcroJS heap spraying and a DEP bypass via BIB.dll to achieve remote code execution.

This Metasploit module exploits CVE-2010-3654, a vulnerability in Adobe Flash Player versions 9.x and 10.0, by embedding a crafted SWF file in a PDF. It uses AcroJS heap spraying and a DEP bypass via BIB.dll to achieve arbitrary code execution.