Adobe Reader Exploits PoC-Updated

Milw0rm released three Adobe Reader exploits in their website. One of the exploit was considered as Critical according to Adobe [http://www.adobe.com/support/security/bulletins/apsb09-04.html], another exploit PoC was tested on Ubuntu platform and lastly was PDF remote exploit target on customDictionaryOpen() function.

Adobe Reader 8.1.4/9.1 GetAnnots() Remote Code Execution Exploit




Adobe Acrobat Reader 8.1.2 – 9.0 getIcon() Memory Corruption Exploit
Exploit pdf reader by spray the large buffer into the Collab.getIcon () function.

PoC can be obtained from http://milw0rm.com/sploits/2009-Adobe.Collab.getIcon.pdf

Adobe 8.1.4/9.1 customDictionaryOpen() Code Execution Exploit




Prevention Steps:
- http://www.web2secure.com/2009/04/preventing-from-pdf-exploit-in-acrobat.html


Reference:
http://www.milw0rm.com/exploits/8595
http://www.milw0rm.com/exploits/8569