hacksysteam/CVE-2023-21608

It fails in version 22.003.20282

ricnar456 opened this issue · 10 comments

ricnar456 commented

in version

image

it fails with this error

image

javascript debugger opens automatically and ends here
image

hacksysteam commented

@ricnar456 the exploit only supports 32bit that's why it's failing on 64bit

ricnar456 commented

triyng in a 32 bits vulnerable version

image

ricnar456 commented

it fails

image

ricnar456 commented

Trying in the last vulnerable version

image

ricnar456 commented

in this version does not have the previous error but it closes without executing calc

ricnar456 commented

in more attempts the error is displayed again

image

hacksysteam commented

@ricnar456 Currently, the exploit only supports these versions as these were tested.

const VersionData = {
    22.00120085: {
        AcroFormOffset: 0x00293fe0,
        VirtualProtect: 0x007da108,
        ROP: [0x6faa60, 0x256984, 0x1e646]
    },
    22.00120117: {
        AcroFormOffset: 0x00293fe0,
        VirtualProtect: 0x007d9108,
        ROP: [0x6f9900, 0x256974, 0x5030f9]
    },
    22.00120142: {
        AcroFormOffset: 0x00294060,
        VirtualProtect: 0x007d9108,
        ROP: [0x6f9a00, 0x256a14, 0x49caf7]
    },
    22.00320258: {
        AcroFormOffset: 0x002943c0,
        VirtualProtect: 0x007da108,
        ROP: [0x6fa7a0, 0x32c71 /*xchg eax, esp ; RET ;*/, 0x1a4592 /*pop esp ; ret; */]
    }
};
  • 👍1
ricnar456 commented

it seems to work in 22.00320258 32 bits, thanks

xupeng1231 commented

@ricnar456 Could you please tell me where you get the older version installer of Adobe Acrobat Reader DC? Thanks

ricnar456 commented
  • 👍1