CVE-2021-39863
HIGHAdobe Acrobat and Reader DC < 21.005.20060 - Heap-based Buffer Overflow via Crafted PDF File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2021-39863. PoCs published by lsw29475, WHS-SEGFAULT.
AI-analyzed exploit summary This is a functional exploit PoC for CVE-2021-39863, leveraging a use-after-free vulnerability in Adobe Acrobat Reader to achieve arbitrary memory read/write and execute shellcode. The exploit uses heap spraying and ArrayBuffer manipulation to corrupt memory and hijack execution flow.
Description
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Exploits (2)
This is a functional exploit PoC for CVE-2021-39863, leveraging a use-after-free vulnerability in Adobe Acrobat Reader to achieve arbitrary memory read/write and execute shellcode. The exploit uses heap spraying and ArrayBuffer manipulation to corrupt memory and hijack execution flow.
The repository contains a functional exploit for CVE-2021-39863, demonstrating a heap-based buffer overflow vulnerability in the URL parsing logic of a target software. The exploit manipulates URL concatenation to trigger memory corruption, potentially leading to remote code execution.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H