CVE-2014-0514
Adobe Reader Mobile < 11.2 - Remote Code Execution via JavaScript in PDF
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2014-0514.
PoCs published by Metasploit, Yorick Koster, Yorick Koster, joev, including Metasploit module exploits/android/fileformat/adobe_reader_pdf_js_interface.
AI-analyzed exploit summary This Metasploit module exploits CVE-2014-0514 in Adobe Reader for Android by embedding a JavaScript exploit into a PDF, leveraging the addJavascriptInterface vulnerability to achieve remote code execution.
Description
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.
Exploits (3)
This Metasploit module exploits CVE-2014-0514 in Adobe Reader for Android by embedding a JavaScript exploit into a PDF, leveraging the addJavascriptInterface vulnerability to achieve remote code execution.
This exploit leverages insecure JavaScript interfaces in Adobe Reader for Android to execute arbitrary Java code, allowing file creation in the app sandbox. The PoC demonstrates command execution via reflection APIs exposed through JavaScript objects.
This Metasploit module exploits CVE-2014-0514 in Adobe Reader for Android by embedding a JavaScript interface exploit within a PDF, leading to remote code execution via a reverse TCP payload.