Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-40724. PoCs published by tinopreter.
AI-analyzed exploit summary This repository contains a working exploit for CVE-2021-40724, targeting a local file inclusion (LFI) vulnerability in the MobileHackingLab DocumentViewer app. The exploit leverages dynamic code loading to execute arbitrary commands by writing a malicious library file into the vulnerable app's directory.
Description
Acrobat Reader for Android versions 21.8.0 (and earlier) are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Exploits (1)
This repository contains a working exploit for CVE-2021-40724, targeting a local file inclusion (LFI) vulnerability in the MobileHackingLab DocumentViewer app. The exploit leverages dynamic code loading to execute arbitrary commands by writing a malicious library file into the vulnerable app's directory.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H