whs-segfault/cve-2021-39863Exploit para buffer overflow no heap do Adobe Acrobat Reader DC (CVE-2021-39863) com bypass de ASLR/DEP, incluindo análise de causa raiz e função vulnerável revertida.
Adobe Acrobat Reader DC 21.005.20048.43252 (32 bits)
Análise
Adobe root cause.pdf : Explica sobre a causa raiz do CVE-2021-39863
ExploitPoint.c : Função vulnerável revertida
exploit.pdf : PDF de exploit
exploit.js : Script JS incorporado no exploit.pdf
exemplo de exploit
Exodus Blog, Análise de uma Vulnerabilidade de Estouro de Buffer Heap no Adobe Acrobat Reader DC https://blog.exodusintel.com/2021/10/04/analysis-of-a-heap-buffer-overflow-vulnerability-in-adobe-acrobat-reader-dc-2/?utm_source=feedly&utm_medium=rss&utm_campaign=analysis-of-a-heap-buffer-overflow-vulnerability-in-adobe-acrobat-reader-dc-2
