It fails in version 22.003.20282

[ricnar456]

in version

it fails with this error

javascript debugger opens automatically and ends here

[hacksysteam]

@ricnar456 the exploit only supports 32bit that's why it's failing on 64bit

[ricnar456]

triyng in a 32 bits vulnerable version

[ricnar456]

it fails

[ricnar456]

Trying in the last vulnerable version

[ricnar456]

in this version does not have the previous error but it closes without executing calc

[ricnar456]

in more attempts the error is displayed again

[hacksysteam]

@ricnar456 Currently, the exploit only supports these versions as these were tested.

const VersionData = {
    22.00120085: {
        AcroFormOffset: 0x00293fe0,
        VirtualProtect: 0x007da108,
        ROP: [0x6faa60, 0x256984, 0x1e646]
    },
    22.00120117: {
        AcroFormOffset: 0x00293fe0,
        VirtualProtect: 0x007d9108,
        ROP: [0x6f9900, 0x256974, 0x5030f9]
    },
    22.00120142: {
        AcroFormOffset: 0x00294060,
        VirtualProtect: 0x007d9108,
        ROP: [0x6f9a00, 0x256a14, 0x49caf7]
    },
    22.00320258: {
        AcroFormOffset: 0x002943c0,
        VirtualProtect: 0x007da108,
        ROP: [0x6fa7a0, 0x32c71 /*xchg eax, esp ; RET ;*/, 0x1a4592 /*pop esp ; ret; */]
    }
};

[ricnar456]

it seems to work in 22.00320258 32 bits, thanks

[xupeng1231]

@ricnar456 Could you please tell me where you get the older version installer of Adobe Acrobat Reader DC? Thanks

[ricnar456]

https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2200320258/AcroRdrDC2200320258_en_US.exe https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2200320282/AcroRdrDC2200320282_en_US.exe https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2200220191/AcroRdrDC2200220191_en_US.exe El sáb, 29 de abr de 2023, 07:50, xupeng1231 ***@***.***> escribió:

…

@ricnar456 <https://github.com/ricnar456> Could you please tell me where you get the older version installer of Adobe Acrobat Reader DC? Thanks — Reply to this email directly, view it on GitHub <#1 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACBI7TWMF2NQTOTJG7QD2RDXDTW6VANCNFSM6AAAAAAUVDFCPU> . You are receiving this because you were mentioned.Message ID: ***@***.***>