Zero day PDF exploit for Adobe Acrobat

2009-2-12 01:56 586 0

摘要: 来源：Ph4nt0m Google GroupLink to exploit:Please download and open it locally in Adobe ...

关键词： Adobe Acrobat exploit open affected earlier investigationreg Page pdfDescription AcrobatActiveX

来源：Ph4nt0m Google GroupLink to exploit:Please download and open it locally in Adobe Acrobat (not in Adobe AcrobatActiveX control):http://security.fedora-hosting.com/0day/pdf/pdf_poc.pdfDescription:0-day proof of concept (PoC) exploit for Adobe Acrobat.Software affected:+ Adobe Reader 8.1 (and earlier)+ Adobe Acrobat Standard, Pro and Elements 8.1 (and earlier)+ Adobe Acrobat 3DSystem affected:+ Windows XP with IE7Details:To view exploit code in Adobe Acrobat go to: Pages -> Page Properties ->Actions(trigger: Page Open, action: Open a web link)This is URL handling bug in shell32!ShellExecute()Workaround:Currently unavailable.Thanks to:pdp (at) gnucitizen.org for his investigationregards,cyanid-E <biz4rre[at]gmail.com>

声明：文章版权归原作者所有部分文章转自互联网如有侵权请联系 [邮箱地址] 删除