CVE-2010-2883 PoC — Adobe Reader和Acrobat CoolType.dll栈缓冲区溢出漏洞

Source

https://github.com/avielzecharia/CVE-2010-2883

Associated Vulnerability

Title: Adobe Reader和Acrobat CoolType.dll栈缓冲区溢出漏洞 (CVE-2010-2883)
Description:Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

Description

Playing with CVE-2010-2883

Readme

# CVE-2010-2883
PoC for CVE-2010-2883 using TTD research, Metasploit techniques, BOF+ROP and HEAP spraying for educational purposes only.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →