CVE-2021-21042 PoC — Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability

Source

https://github.com/r1l4-i3pur1l4/CVE-2021-21042

Associated Vulnerability

Title: Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability (CVE-2021-21042)
Description:Acrobat Reader DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to arbitrary disclosure of information in the memory stack. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Readme

# CVE-2021-21042

Inspired from 

https://www.zerodayinitiative.com/blog/2021/2/17/zdi-21-171-getting-information-disclosure-in-adobe-reader-through-the-id-tag

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →