Exploit for Heap-based Buffer Overflow in Adobe Acrobat Dc CVE-2021-39863

## https://sploitus.com/exploit?id=E6F2ABF1-FD51-5E02-B5B1-1094F56073F3
# CVE-2021-39863

- Adobe Acrobat Reader DC 21.005.20048.43252 (32 bit)
  - Down load this version : https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048_en_US.exe
  - Bypass ASLR, DEP
  - Non Bypass CFG
  
- Analysis
  - [Team Blog](https://whs-segfault.github.io/adobe/2024/08/12/CVE-2021-39863.html)
  - [Team Member Blog - mntly](https://velog.io/@mntly/CVE-2021-39863)

<br>

- Adobe root cause.pdf : Explain about root cause of CVE-2021-39863

- exploit.pdf : Exploit PDF
- exploit.js : Embedded JS Script in exploit.pdf
- exploit example
  
  ![exploit](https://github.com/user-attachments/assets/115db10e-e113-4e0f-9e56-aa8aef5ca3a3)



# REFERENCE
- Exodus Blog, Analysis of a Heap Buffer-Overflow Vulnerability in Adobe Acrobat Reader DC
https://blog.exodusintel.com/2021/10/04/analysis-of-a-heap-buffer-overflow-vulnerability-in-adobe-acrobat-reader-dc-2/?utm_source=feedly&utm_medium=rss&utm_campaign=analysis-of-a-heap-buffer-overflow-vulnerability-in-adobe-acrobat-reader-dc-2