Join other TweakTown fans on our Facebook fan page!
Technology content trusted by users in North America and around the world.
Sign up to our newsletterWatch our YouTube channelLike us on FacebookFollow us on Twitter+1 us on Google Plus

4,337 Articles | 23,892 Posts | 76,644 Members
Select Your Edition:USA EditionAU Edition
System
Builders
Guide

REALLY FRESH TECH CONTENT (OUR VERY LATEST STUFF)...

USA EditionYou are located: Home > All News > News > Adobe PDF Zero-day Exploit - Now Without Clicking

Adobe PDF Zero-day Exploit - Now Without Clicking

By: (more) | Posted: Mar 6, 2009 4:30 am

The Register reports that the zero-day exploit in Adobe Reader and Acrobat has become even more dangerous.

 


Security blogger Didier Stevens has a proof of concept demonstration on his website showing how a maliciously contructed PDF can exploit a system without even clicking on it.

 

 

Adoble has said the official patch for this exploit won't be available until March 11th, but hopefully Stevens' demo will speed things up a bit.

 

The exploit techniques demoed by Stevens make use of the Windows Explorer Shell Extension installed with Adobe Reader. The feature creates a conduit between Adobe Reader and Windows Explorer and means that simply hovering the mouse cursor over a booby-trapped file, or selecting it, are enough to allow the bust out of potentially malicious code. Selecting a thumbnail view poses a similar risk.

 

Further Reading: Read and find more news at our news index page.

TweakTown News RSS FeedDo you get our news RSS feed? Get It!

Got a news tip? Tell Us!

Post a Comment about this news

Related Tags


Tech News Posts

View More News Posts

TweakTown Web Poll

Question: What new products do you most want to see at Computex 2012?

Audio

Cases, Cooling & PSUs

CPU, APU & Chipsets

Displays

Memory

Mobile Devices and Phones

Motherboards

Peripherals

Storage / SSDs

Ultrabooks and Laptops

Video Cards

Booth Babes

or View the Results

View More Polls

Forum Activity

View More Forum Posts

Press Releases

View More Press Releases