Adobe Acrobat Pro DC WillSave OCG Use-After-Free Remote Code Execution Vulnerability

ID ZDI-16-302
Type zdi
Reporter AbdulAziz Hariri - HPE Zero Day Initiative
Modified 2016-11-09T00:00:00



The specific flaw exists within the handling of OCG objects within the WillSave document action. A specially crafted OCG object referenced inside a WillSave document action can force a dangling pointer to be reused after it has been freed. An attacker can leverage this vulnerability to execute arbitrary code under the context of the current process.