CVE-2021-45067
MEDIUMAdobe Acrobat and Reader DC < 21.007.20099 & < 17.011.30204 - Memory Access After Buffer End
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-45067. PoCs published by hacksysteam.
AI-analyzed exploit summary This PoC exploits an out-of-bounds read vulnerability in Adobe Reader's XFA module by confusing ANSI and Unicode string handling, leading to information leakage from the sandboxed process. The exploit grooms the heap and triggers garbage collection to leak sensitive data via a web server.
Description
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Exploits (1)
This PoC exploits an out-of-bounds read vulnerability in Adobe Reader's XFA module by confusing ANSI and Unicode string handling, leading to information leakage from the sandboxed process. The exploit grooms the heap and triggers garbage collection to leak sensitive data via a web server.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N