Adobe Reader and Acrobat Pro Privilege Escalation Vulnerability resolution (CVE-2015-5090)

Adobe Reader and Acrobat Pro Privilege Escalation Vulnerability resolution (CVE-2015-5090)

0 × 01 Preface
CVE-2015-5090 is a bug that exists in Adobe Reader/Acrobat Pro and has been found and submitted to ZDI a few months ago. This article focuses on the details of this bug and shares several different attack methods.
AdobeARMService is an Adobe update program and a system service installed on Adobe Reader/Acrobat Pro. This service creates control management for the startup service in the registry, allowing the service to process external control requests. The request scheduler processes the currently passed Service Request Code and distributes requests reasonably. These updated programs or armsvc have eight related functions that can be triggered without privilege,