Adobe Reader media.newPlayer Use-After-Free Code Execution

Added: 12/23/2009 CVE: CVE-2009-4324 BID: 37331 OSVDB: 60980 Background Adobe Reader is free software for viewing PDF documents. Problem This issue is caused by a use-after-free error within the "Doc.Media.newPlayer" JavaScript function, which could be exploited by attackers to execute arbitrary...

Adobe Doc.media.newPlayer Use After Free Vulnerability

This module exploits a use after free vulnerability in Adobe Reader and Adobe Acrobat Professional versions up to and including 9.2. Module Options msf use exploit/windows/fileformat/adobe/medianewplayer msf undefinedmedianewplayer show actions ...actions... msf undefinedmedianewplayer set ACTION...