Lucene search

K
zdiAbdulAziz Hariri and Jasiel Spelman - HP Zero Day InitiativeZDI-15-310
HistoryJul 14, 2015 - 12:00 a.m.

Adobe Reader Folder Level Scripts Unload Denial Of Service Vulnerability

2015-07-1400:00:00
AbdulAziz Hariri and Jasiel Spelman - HP Zero Day Initiative
www.zerodayinitiative.com
7

0.017 Low

EPSS

Percentile

87.8%

This vulnerability allows remote attackers to unload folder level scripts on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the app.doc object. By creating a specially crafted PDF with specific JavaScript instructions, it is possible to unload folder level scripts from the document level. A remote attacker could exploit this to create a denial of service condition.