CVE-2021-39863

• Adobe Acrobat Reader DC 21.005.20048.43252 (32位)

  • 下载此版本：https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048_en_US.exe
  • 绕过ASLR、DEP
  • 无法绕过CFG

• 分析

  • 团队博客
  • 团队成员博客 - mntly

• Adobe root cause.pdf：解释CVE-2021-39863的根本原因

• ExploitPoint.c：逆向漏洞函数

• exploit.pdf：漏洞利用PDF

• exploit.js：嵌入在exploit.pdf中的JS脚本

• 漏洞利用示例

  

参考

• Exodus博客，Adobe Acrobat Reader DC中堆缓冲区溢出漏洞分析 https://blog.exodusintel.com/2021/10/04/analysis-of-a-heap-buffer-overflow-vulnerability-in-adobe-acrobat-reader-dc-2/?utm_source=feedly&utm_medium=rss&utm_campaign=analysis-of-a-heap-buffer-overflow-vulnerability-in-adobe-acrobat-reader-dc-2