FILE-PDF Adobe Acrobat and Reader docID Stack Buffer Overflow

Stats

First seen

February 2022

Last seen

October 2026

Description

Detects a PDF exploiting CVE-2018-4901, a stack buffer overflow in Adobe Acrobat Reader's document identifier handling that can allow code execution. The rule matches the oversized trailer identifier fields that public exploits use to corrupt the stack.

CVEs

Related malware families

References

• nvd.nist.gov →