Comments on: 0day: PDF pwns Windows http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/ Information Security Think Tank Mon, 12 Dec 2011 19:56:03 +0000 hourly 1 http://wordpress.org/?v=3.1.2 By: Confirmation d’une vulnérabilité critique dans Adobe Reader et Acrobat — SecurityVibes Magazine http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-129775 Confirmation d’une vulnérabilité critique dans Adobe Reader et Acrobat — SecurityVibes Magazine Wed, 23 Mar 2011 15:15:39 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-129775 [...] informatique à être sur le qui-vive, dans l’attente de la confirmation d’une vulnérabilité découverte par Petko D. Petkov et affectant notamment le lecteur PDF Adobe Reader, très répandu en milieu professionnel. Andrew [...] [...] informatique à être sur le qui-vive, dans l’attente de la confirmation d’une vulnérabilité découverte par Petko D. Petkov et affectant notamment le lecteur PDF Adobe Reader, très répandu en milieu professionnel. Andrew [...]

]]> By: .:[ d4 n3wS ]:. » Blog Archive » Vulnérabilité dans Acrobat Reader http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-128749 .:[ d4 n3wS ]:. » Blog Archive » Vulnérabilité dans Acrobat Reader Wed, 25 Aug 2010 04:14:11 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-128749 [...] Origine de l’article : http://www.gnucitizen.org/blog/0day-pdf-pwns-windows [...] [...] Origine de l’article : http://www.gnucitizen.org/blog.....ns-windows [...]

]]> By: Moose http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-126146 Moose Wed, 25 Feb 2009 18:44:53 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-126146 Does this affect Windows XP w/ Service Pack 3? Thanks Does this affect Windows XP w/ Service Pack 3?

Thanks

]]> By: Backdooring PDF Files http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-125907 Backdooring PDF Files Tue, 10 Feb 2009 14:09:53 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-125907 [...] 20/09/07 - PDP’s PDF URI Parsing Vulnerability [...] [...] 20/09/07 – PDP’s PDF URI Parsing Vulnerability [...]

]]> By: Don’t Open PDF Documents If You Run Windows ~ usrbingeek’s musings http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-122197 Don’t Open PDF Documents If You Run Windows ~ usrbingeek’s musings Thu, 22 May 2008 04:13:41 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-122197 [...] [0day: PDF pwns Windows] [...] [...] [0day: PDF pwns Windows] [...]

]]> By: Adobe PDF 被發現零時差安全漏洞 | 大砲開講 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-119798 Adobe PDF 被發現零時差安全漏洞 | 大砲開講 Fri, 25 Apr 2008 08:38:17 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-119798 [...] GnuCitizen的pdp最近在他們的部落格張貼了一篇文章，是有關PDF檔案出現零時差安全漏洞。如果使用者開啟一個特別製作的PDF檔案，就可以讓攻擊者控制你的系統。請各位不要亂開啟來路不明的PDF檔案。 在這篇文章中，作者只展示了此安全漏洞，並宣稱已經獲得Adobe，但沒有公開驗證程式，以致於有些人發出質疑的聲音。 [...] [...] GnuCitizen的pdp最近在他們的部落格張貼了一篇文章，是有關PDF檔案出現零時差安全漏洞。如果使用者開啟一個特別製作的PDF檔案，就可以讓攻擊者控制你的系統。請各位不要亂開啟來路不明的PDF檔案。 在這篇文章中，作者只展示了此安全漏洞，並宣稱已經獲得Adobe，但沒有公開驗證程式，以致於有些人發出質疑的聲音。 [...]

]]> By: JohnFavorite.com » Blog Archive » 0day: PDF pwns Windows http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-117727 JohnFavorite.com » Blog Archive » 0day: PDF pwns Windows Tue, 01 Apr 2008 08:03:52 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-117727 [...] going through the [Full-disclosure] mailing list I came across this gem. It seems as though Petko Petkovhave over at GNUCITIZEN found a serious flaw in the way Adobe [...] [...] going through the [Full-disclosure] mailing list I came across this gem. It seems as though Petko Petkovhave over at GNUCITIZEN found a serious flaw in the way Adobe [...]

]]> By: CG http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-114763 CG Thu, 14 Feb 2008 22:47:13 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-114763 now that all the patches are out are you going to release some more details? now that all the patches are out are you going to release some more details?

]]> By: Inking’s Blog » Google GMail E-mail Hijack Technique http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-108296 Inking’s Blog » Google GMail E-mail Hijack Technique Sun, 03 Feb 2008 04:56:58 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-108296 [...] my disclosure policy regarding this vulnerability and the one disclosed several days ago concerning PDF. Let’s say that it is just one of my social [...] [...] my disclosure policy regarding this vulnerability and the one disclosed several days ago concerning PDF. Let’s say that it is just one of my social [...]

]]> By: Onlinespiele http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-83384 Onlinespiele Sat, 08 Dec 2007 17:27:06 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-83384 Are there any reactions from Adobe? Are there any reactions from Adobe?

]]> By: » Mozilla Firefox 2.0.0.8 Universal XSS Zayıflığı WWW~TR-SECURiTY~COM: http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-76418 » Mozilla Firefox 2.0.0.8 Universal XSS Zayıflığı WWW~TR-SECURiTY~COM: Sat, 24 Nov 2007 16:08:52 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-76418 [...] GNUCITIZEN yazarlarından pdp yine bir universal XSS zayıflığı bulmuÅŸ.Universal derken, genel olarak bir uygulamadan kaynaklanan ve her yerde geçerli olan anlamına gelmektedir.ÖrneÄŸin yakın zamanda yine pdp Adobe Acrobat PDF dökümanlarını açarken meydana gelen bir universal XSS daha bulmuÅŸtu. [...] [...] GNUCITIZEN yazarlarından pdp yine bir universal XSS zayıflığı bulmuÅŸ.Universal derken, genel olarak bir uygulamadan kaynaklanan ve her yerde geçerli olan anlamına gelmektedir.ÖrneÄŸin yakın zamanda yine pdp Adobe Acrobat PDF dökümanlarını açarken meydana gelen bir universal XSS daha bulmuÅŸtu. [...]

]]> By: Sally http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-76345 Sally Sat, 24 Nov 2007 10:48:11 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-76345 Have you all noticed that the spammer's choice of delivery has become PDF attachments? The attached PDF usually contains stock quotes. Have you all noticed that the spammer’s choice of delivery has become PDF attachments?

The attached PDF usually contains stock quotes.

]]> By: Sally http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-76344 Sally Sat, 24 Nov 2007 10:44:27 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-76344 This explains why spammers have now switched to sending their emails with a PDF attachment. Usually the PDF attachment contains an embedded image of a stock quote or something stupid like that. Lately I have been openning these out of curiousity but it seems we should not. This explains why spammers have now switched to sending their emails with a PDF attachment. Usually the PDF attachment contains an embedded image of a stock quote or something stupid like that. Lately I have been openning these out of curiousity but it seems we should not.

]]> By: ggman http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-71646 ggman Thu, 15 Nov 2007 23:45:22 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-71646 @cyanid-E I opened your pdf on a linux system via: 1. adobe firefox plugin 2. adobe reader 8.1.1 ("Adobe strongly recommends upgrading to Adobe Reader 8.1.1") and evolution offered me to send an email to guys with really strange email adresses: 1. "windows/system32/calc.exe" 2. test%.. - quite scary - @cyanid-E

I opened your pdf on a linux system
via:

1. adobe firefox plugin
2. adobe reader 8.1.1 (“Adobe strongly recommends upgrading to Adobe Reader 8.1.1″)

and evolution offered me to send an email to guys with really strange email adresses:

1. “windows/system32/calc.exe”
2. test%..

- quite scary -

]]> By: \-=[WHK]=-// » Archive » Explicación del comando de ejecución arbitraria en documentos PDF http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-71511 \-=[WHK]=-// » Archive » Explicación del comando de ejecución arbitraria en documentos PDF Thu, 15 Nov 2007 18:55:34 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-71511 [...] http://www.gnucitizen.org/blog/0day-pdf-pwns-windows http://secunia.com/advisories/26201/ [...] [...] http://www.gnucitizen.org/blog.....ns-windows http://secunia.com/advisories/26201/ [...]

]]> By: V0lTr4n Bl0G » El Adobe Reader tiene un serio agujero de seguridad http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-69929 V0lTr4n Bl0G » El Adobe Reader tiene un serio agujero de seguridad Tue, 13 Nov 2007 02:20:05 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-69929 [...] Según el hacker Petko Petkov (Gray hat), existe un agujero de seguridad en Adobe Reader, que con solo abrir un PDF manipulado un hacker podría ejecutar un codigo malicioso en nuestros PCs, no dando detalles de la vulnerabilidad.Petkov ha confirmado que este bug afecta a los Windows XP SP2 con las últimas versiones de Adobe Reader 8.1, 8.0 y 7, aunque no se descarta que otras versiones de Windows estén afectadas. [...] [...] Según el hacker Petko Petkov (Gray hat), existe un agujero de seguridad en Adobe Reader, que con solo abrir un PDF manipulado un hacker podría ejecutar un codigo malicioso en nuestros PCs, no dando detalles de la vulnerabilidad.Petkov ha confirmado que este bug afecta a los Windows XP SP2 con las últimas versiones de Adobe Reader 8.1, 8.0 y 7, aunque no se descarta que otras versiones de Windows estén afectadas. [...]

]]> By: XT12D http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-68207 XT12D Fri, 09 Nov 2007 19:34:48 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-68207 Bad analogy, Adrian, A better one would be, "Why not hand out vials of HIV tainted blood in the hopes that some freelance doctor will find a cure?" Bad analogy, Adrian, A better one would be, “Why not hand out vials of HIV tainted blood in the hopes that some freelance doctor will find a cure?”

]]> By: 0day vulnerability in PDF files could break your windows box | AXT Magazine http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-67439 0day vulnerability in PDF files could break your windows box | AXT Magazine Thu, 08 Nov 2007 01:56:12 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-67439 [...] under certain circumstances, a PDF file could remote execute an application on the host machine. The demo video shows how two pdf files, stored on local drive, once they’re open, can launch another [...] [...] under certain circumstances, a PDF file could remote execute an application on the host machine. The demo video shows how two pdf files, stored on local drive, once they’re open, can launch another [...]

]]> By: 新一代病毒感染途徑-PDF « Jiunn’s mind + information collection http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-65820 新一代病毒感染途徑-PDF « Jiunn’s mind + information collection Tue, 06 Nov 2007 07:47:52 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-65820 [...] 2007/09/20 PDF pwns Windows這篇文章。 [...] [...] 2007/09/20 PDF pwns Windows這篇文章。 [...]

]]> By: Deeprunner http://www.gnucitizen.org/blog/0day-pdf-pwns-windows/comment-page-2/#comment-65222 Deeprunner Mon, 05 Nov 2007 04:44:14 +0000 http://www.gnucitizen.org/blog/0day-pdf-pwns-windows#comment-65222 Very Informative and I see We still can't get along apparently, oh well. But, being obviously on the lower end of the knowledge curve in this arena...Can any of you human beings tell me what you think of this link's usefullness regarding these kind of issues? -Vegas Very Informative and I see We still can’t get along apparently, oh well. But, being obviously on the lower end of the knowledge curve in this arena…Can any of you human beings tell me what you think of this link’s usefullness regarding these kind of issues? -Vegas

]]>