vendor:
Adobe Reader
by:
Exploit-DB
9,3
CVSS
HIGH
Adobe 0day
20
CWE
Product Name: Adobe Reader
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: YES
Related CWE: CVE-2010-1297
CPE: a:adobe:reader
Metasploit:
https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2010-0503/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2010-0464/, https://www.rapid7.com/db/vulnerabilities/adobe-air-cve-2010-1297/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2010-1297/, https://www.rapid7.com/db/vulnerabilities/apple-osx-flashplayerplugin-cve-2010-1297/, https://www.rapid7.com/db/vulnerabilities/hpsim-cve-2010-1297/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2010-1297/, https://www.rapid7.com/db/vulnerabilities/adobe-reader-apsb10-15-CVE-2010-1297/, https://www.rapid7.com/db/vulnerabilities/adobe-unspec-bof-cve-2010-1297/
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Unknown
2010
Exploit-DB Note – Live POC
This exploit is a malicious file taken from the wild. It can be decrypted using the openssl aes-256-cbc command with the password 'edb'. By visiting the link provided, the user agrees to be responsible for any damages that occur.
Mitigation:
Ensure that all Adobe software is up to date and patched with the latest security updates.