Hacking group alleges attack via PDF

[Dogbiscuit]

The hacking group GNUCitizen claimed on Thursday to have found a critical flaw in Adobe's Portable Document Format (PDF) format that could let an attacker compromise a computer running the Windows operating system, if the user opens a specially-crafted PDF file.

Security Focus

"The vulnerability affects Windows XP SP2 with IE7 and Adobe Reader 8.1, 8.0 and 7." It's been reported that Win2K SP3 is vulnerable as well.

"Windows Vista users are not affected."

"The PDF issue is officially confirmed by Adobe’s team. Foxit is vulnerable as well, although the user is required to interact with the document in order to launch the exploit."

[TOMxEU]

Adobe PDF Vulnerability POC Flash Video [20 sec] - openning PDF will open Calc and Notepad.

[Thankful]

Workaround available for vulnerability in versions 8.1 and earlier of Adobe Reader and Acrobat:
http://www.adobe.com/support/securit...apsa07-04.html