Critical Zero-Day Adobe PDF Bug Compromises Windows

malware · Sep 21, 2007, 09:18 PM

A critical zero-day PDF bug in Adobe's Acrobat Reader has been discovered. The scenario is that an attacker rigs a PDF file designed to exploit the flaw. He or she distributes it via e-mail or through other means, or hosts it on a Web page. When a user opens the rigged PDF file with a vulnerable application, the user's machine can be loaded with malware that makes it open to a takeover. This PDF vulnerability is even worse than the QuickTime flaw in Mozilla Firefox fixed 2 days ago. Both Mozilla Firefox flaw and PDF bugs have been discovered by Petko D. Petkov, aka pdp. The story comes as warning to all users working with Acrobat Reader. Please be careful until a fix is released. Click here or read Petko's web blog for more information.

Source: eWeek

malware · Sep 21, 2007, 09:21 PM

Hey, Petko is Bulgarian just like me, the man is becoming a legend. Two big flaws discovered by him in one week!

Wile E · Sep 21, 2007, 09:34 PM

Hmmm, from reading his comments on his blog page, it seems it affects Foxit PDF reader as well, but to a lesser degree. Hope an update comes soon.

WarEagleAU · Sep 22, 2007, 05:25 AM

Man, it seems everything is getting infected these days.

ex_reven · Sep 22, 2007, 05:38 AM

Quote:

Originally Posted by Wile E

Hmmm, from reading his comments on his blog page, it seems it affects Foxit PDF reader as well, but to a lesser degree. Hope an update comes soon.

Meh, its no different to uploading a trojan laden .exe.
Any file downloaded from the 'net should be expected to be a virus unless you explicitly know or trust the person, website providing the file.

Is the PDF in question any more difficult for AV to pick up?

Helvetica · Sep 22, 2007, 08:11 AM

If you download a questionable .exe file, run a virus scan before opening it. I hate PDFs anyway. I avoid them at all costs. Takes ages to load now matter how powerful your PC is.

Wile E · Sep 22, 2007, 08:13 AM

Quote:

Originally Posted by Helvetica

If you download a questionable .exe file, run a virus scan before opening it. I hate PDFs anyway. I avoid them at all costs. Takes ages to load now matter how powerful your PC is.

Not if you use Foxit PDF Reader. http://www.foxitsoftware.com/pdf/rd_intro.php

Sep 21, 2007, 09:18 PM	#1
malware Eligible for custom title Join Date: Nov 2004 Location: Bulgaria Posts: 5,413 (1.74/day) Thanks: 78 Thanked 986 Times in 497 Posts System Specs	Critical Zero-Day Adobe PDF Bug Compromises Windows A critical zero-day PDF bug in Adobe's Acrobat Reader has been discovered. The scenario is that an attacker rigs a PDF file designed to exploit the flaw. He or she distributes it via e-mail or through other means, or hosts it on a Web page. When a user opens the rigged PDF file with a vulnerable application, the user's machine can be loaded with malware that makes it open to a takeover. This PDF vulnerability is even worse than the QuickTime flaw in Mozilla Firefox fixed 2 days ago. Both Mozilla Firefox flaw and PDF bugs have been discovered by Petko D. Petkov, aka pdp. The story comes as warning to all users working with Acrobat Reader. Please be careful until a fix is released. Click here or read Petko's web blog for more information. Source: eWeek

Processor:	Intel Core 2 Quad Q6600 G0 VID: 1.2125
Motherboard:	GIGABYTE GA-P35-DS3P rev.2.0
Cooling:	Thermalright Ultra-120 eXtreme + Noctua NF-S12 Fan
Memory:	4x1 GB PQI DDR2 PC2-6400
Video Card:	Colorful iGame Radeon HD 4890 1 GB GDDR5
Hard Disk:	2x 500 GB Seagate Barracuda 7200.11 32 MB RAID0
Optical Drive:	LITE-ON IT LH-20A1L 20x SATA DVD±RW LightScribe
CRT/LCD Model:	BenQ G2400W 24-inch WideScreen LCD
Case:	Cooler Master COSMOS RC-1000 (sold), Cooler Master HAF-932 (delivered)
Sound Card:	Creative X-Fi XtremeMusic + Logitech Z-5500 Digital THX
PSU:	Chieftec CFT-1000G-DF 1kW
Software:	Laptop: Lenovo 3000 N200 C2DT2310/3GB/120GB/GF7300/15.4"/Razer

Sep 21, 2007, 09:21 PM	#2
malware Eligible for custom title Join Date: Nov 2004 Location: Bulgaria Posts: 5,413 (1.74/day) Thanks: 78 Thanked 986 Times in 497 Posts System Specs	Hey, Petko is Bulgarian just like me, the man is becoming a legend. Two big flaws discovered by him in one week! __________________ techPоwerUp!

Processor:	Intel Core 2 Quad Q6600 G0 VID: 1.2125
Motherboard:	GIGABYTE GA-P35-DS3P rev.2.0
Cooling:	Thermalright Ultra-120 eXtreme + Noctua NF-S12 Fan
Memory:	4x1 GB PQI DDR2 PC2-6400
Video Card:	Colorful iGame Radeon HD 4890 1 GB GDDR5
Hard Disk:	2x 500 GB Seagate Barracuda 7200.11 32 MB RAID0
Optical Drive:	LITE-ON IT LH-20A1L 20x SATA DVD±RW LightScribe
CRT/LCD Model:	BenQ G2400W 24-inch WideScreen LCD
Case:	Cooler Master COSMOS RC-1000 (sold), Cooler Master HAF-932 (delivered)
Sound Card:	Creative X-Fi XtremeMusic + Logitech Z-5500 Digital THX
PSU:	Chieftec CFT-1000G-DF 1kW
Software:	Laptop: Lenovo 3000 N200 C2DT2310/3GB/120GB/GF7300/15.4"/Razer

Sep 21, 2007, 09:34 PM	#3
Wile E Power User Join Date: Oct 2006 Location: Western PA (Pittsburgh suburbs) Posts: 18,129 (7.47/day) Thanks: 450 Thanked 3,826 Times in 3,124 Posts System Specs	Hmmm, from reading his comments on his blog page, it seems it affects Foxit PDF reader as well, but to a lesser degree. Hope an update comes soon. __________________ Visit Ashentech “What the hell did you expect? Leave Vista under the pillow and the OS fairy would make it Win7?” -El Fiendo “And Bring Mailman back god damnit, he is the Eric Cartman of TPU” -MRCL

System Name:	The ClusterF**k
Processor:	980X @ 4212Mhz 24/7
Motherboard:	Gigabyte GA-EX58-UD5 BIOS F12
Cooling:	MCR-320, DDC-1 pump w/Bitspower res top (1/2" fittings), Koolance CPU-360
Memory:	3x2GB Mushkin Redlines 1600Mhz 6-8-6-24
Video Card:	Evga GTX 580
Hard Disk:	Seagate 7200.10 320GB x2 RAID0; 2 x Samsung F2 1.5TB; 1 x F1 1TB; 1 x F4 2TB
Optical Drive:	LG WH10LS30K 10X Blu-ray Burner
CRT/LCD Model:	HP LP2475w 24" 1920x1200 IPS
Case:	Technofront Bench Station
Sound Card:	Auzentech X-Fi Forte into Onkyo SR606 and Polk TSi200's + RM6750
PSU:	ENERMAX Galaxy EVO EGX1250EWT 1250W
Software:	Win7 Ultimate N x64

Sep 22, 2007, 05:25 AM	#4
WarEagleAU Bird of Prey Join Date: Jul 2006 Location: Gurley, AL Posts: 9,994 (3.98/day) Thanks: 3,810 Thanked 557 Times in 521 Posts System Specs	Man, it seems everything is getting infected these days. __________________ =-TheEagle-= http://www.heatware.com/eval.php?id=62454 “You crazy? Surfing any website without an antivirus is like freaking with a dirty woman without protection” -OzzmanFloyd120 - Edited for content and clarity

System Name:	Boddha Getta
Processor:	AMD FX 6100 @ 4.432Ghz @1.401V
Motherboard:	ASUS M5A99X EVO AMD 990X AMD SB950
Cooling:	Custom Water. EK 240MM Kit, Supreme HSF - Runs 35C
Memory:	2 x 4GB Corsair Vengeance White LP @ 1.35V
Video Card:	XFX Radeon HD 6870 900/1050 (no OC yet)
Hard Disk:	WD Caviar Black 1.0TB, WD Caviar Green 1.0TB, WD 160GB
Optical Drive:	Samung SH22SL 22X Lightscribe DVD+/-R/RW LG BDRE Reader/Burner Lite ON Max Burner for burning Xbox
CRT/LCD Model:	Asus VH222/S 22: (21.5" Viewable) 1920x1080p HDMI LCD Monitor
Case:	NZXT White Phantom
Sound Card:	Onboard Realtek 5.1
PSU:	NZXT Hale 90 Gold Cert 750W Modular PSU
Software:	Windows 7 Pro 64 bit.
Benchmarks:	5.9 Windows Index rating 3D06 - 17472

Sep 22, 2007, 08:11 AM	#6
Helvetica Banned Join Date: Sep 2007 Posts: 158 (0.08/day) Thanks: 7 Thanked 3 Times in 2 Posts System Specs	If you download a questionable .exe file, run a virus scan before opening it. I hate PDFs anyway. I avoid them at all costs. Takes ages to load now matter how powerful your PC is.

Processor:	Intel Core 2 Quad Q6600 Kentsfield 2.4GHz
Motherboard:	ASUS P5K-E/WIFI-AP
Memory:	2GB DDR2 800mhz
Video Card:	HD2900XT
Hard Disk:	WD 10,000RPM
CRT/LCD Model:	1920x1200
Sound Card:	Creative
PSU:	700w

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)