Arbitrary code execution via stale Annotation object

Use-after-free in Adobe Acrobat and Reader allows remote attackers to execute code through malformed Annotation objects. Annotation handling performs operations on an object without first validating that it still exists, permitting reuse of freed memory. Exploitation requires the target to visit a malicious page or open a malicious file, and resulting code runs in the context of the current process.