Netskope Threat Labs

FILE-PDF Adobe Acrobat Reader DC memory corruption attempt

IPS-SWG

2 SIDs: 58640, 58641

First seen
July 2024
Last seen
July 2024

Detects a PDF exploiting CVE-2021-28639, memory corruption in Adobe Acrobat Reader's page structure parsing that can allow code execution. The rule matches the crafted page tree references that public exploits use to corrupt parser memory.