Exploit for Use After Free in Adobe Acrobat Dc CVE-2023-21608

Name: Exploit for Use After Free in Adobe Acrobat Dc CVE-2023-21608
Rating: 5 (68 reviews)

2023-01-30 | CVSS 1.0

## https://sploitus.com/exploit?id=B691EBF8-0D26-5F89-9EF3-A453D6093CE2
# CVE-2023-21608

[![Twitter Follow](https://img.shields.io/twitter/follow/HackSysTeam?style=social)](https://twitter.com/HackSysTeam)
[![Mastodon Follow](https://img.shields.io/mastodon/follow/109291325205105061?domain=https%3A%2F%2Finfosec.exchange&style=social)](https://infosec.exchange/@hacksysteam)

This bug was `Use after Free` which was caused during `resetForm` operation while handling object memory references.

## Blog

-   [Adobe Acrobat Reader - resetForm - CAgg UaF - RCE Exploit - CVE-2023-21608](https://hacksys.io/blogs/adobe-reader-resetform-cagg-rce-cve-2023-21608)

## Advisory

-   [CVE-2023-21608](https://hacksys.io/advisories/HI-2022-006)

## Demo

[![Adobe Acrobat Reader DC - UaF - Remote Code Execution - CVE-2023-21608](https://img.youtube.com/vi/cguBkC0opXk/0.jpg)](https://www.youtube.com/watch?v=cguBkC0opXk)