ID:8791 - Exploit for Use-after-free in Adobe Acrobat and Adobe Reader - CVE-2023-21608

 
Main Vulnerability Database Exploits ID:8791 - Exploit for Use-after-free in Adobe Acrobat and Adobe Reader - CVE-2023-21608

ID:8791 - Exploit for Use-after-free in Adobe Acrobat and Adobe Reader - CVE-2023-21608

Published: February 2, 2023


Vulnerability identifier: #VU70893
Vulnerability risk: High
CVE-ID: CVE-2023-21608
CWE-ID: CWE-416
Exploitation vector: Remote access
Vulnerable software:
Adobe Acrobat
Adobe Reader

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error within the resetForm method when processing PDF files. A remote attacker can trick the victim to open a specially crafted PDF file and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.


Remediation

Install updates from vendor's website.