Page 1 of 1

Heads-up: Adobe Acrobat PDF Reader vulnerability...

Posted: Wed Dec 16, 2009 11:52 pm
by bretti_kivi
There's been a fresh Adobe reader vulnerability released.

Bottom line? If you weren't expecting the PDF, don't open it!

More details and lots of links here: http://www.f-secure.com/weblog/archives/00001836.html

Bret

Posted: Thu Dec 17, 2009 9:23 am
by fuzzysnuggleduck
This only affects Adobe Acrobat, right? Alternative PDF readers based on a different codebase should be fine.

Posted: Thu Dec 17, 2009 10:16 am
by bretti_kivi
good point, post edited.

Posted: Thu Dec 17, 2009 10:30 am
by fuzzysnuggleduck
I once captured a Javascript based PDF exploit that was coded in base64 several times over that caused our Linux Acrobat Reader to choke up and die. The code was targeted at Windows but it was pretty much a DoS on Acrobat on Linux. Very interesting.