Adobe Doc.media.newPlayer 0-day

A vulnerability has been reported in Adobe Reader and Acrobat, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an unspecified error in the implementation of the "Doc.media.newPlayer()" JavaScript method. This can be exploited to corrupt memory and execute arbitrary code via a specially crafted PDF file.
NOTE: This vulnerability is currently being actively exploited.
The vulnerability is reported in versions 9.2 and prior.
Checkout the screencast by Offensive Security:
http://bit.ly/5n15Mn
For PoC code for Metasploit, see the download link below.
File attachment 1: Download here
Categories
Contact Us
Phone number:
1-612-234-7848
E-mail:
