Day: August 9, 2017

SSD Advisory – Acrobat Reader DC – Stream Object Remote Code Execution

Vulnerability Summary The following advisory describes a use after free vulnerability that leads to remote code execution found in Acrobat Reader DC version 2017.009.20044. Credit A security researcher from, Siberas, has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program Vendor response The vendor has released patches to address this vulnerability. For more information: …

SSD Advisory – Acrobat Reader DC – Stream Object Remote Code Execution Read More »

SSD Advisory – Adobe Reader DC – execMenuItem Off-by-One Heap Buffer Overflow

Vulnerability Summary The following advisory describes a JavaScript execMenuItem off-by-One heap buffer overflow, that can potentially lead to Remote Code Execution, found in Adobe Reader DC version 15.23.20056.213124. Credit An independent security researcher, Steven Seeley, has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program Vendor response The vendor has released patches to address …

SSD Advisory – Adobe Reader DC – execMenuItem Off-by-One Heap Buffer Overflow Read More »

?

Get in touch