Adobe Reader Zero-Day Exploit Being Sold Online

Mman79 · Nov 8, 2012

http://www.theverge.com/2012/11/8/3617770/adobe-reader-sandbox-zero-day-exploit.

"Cybercrime investigation company Group-IB has discovered a zero-day Adobe Reader X and XI exploit that is immune to the program's new Protected Mode."

elapsed · Nov 8, 2012

I really hope they make a version of Reader that uses Windows 8's AppContainer. It's annoying to use the fullscreen reader app just for that protection. The normal "protected mode" clearly isn't good enough.

siljaline · Nov 9, 2012

Zero-day attack reportedly pierces key Adobe Reader defense

Adobe officials say they're investigating claims of a recent attack. A newly published report claims the latest versions of the widely used Reader document viewer are under attack by exploit code that targets a previously unknown vulnerability.

The particular exploit is available in underground forums for as much as $50,000. It's significant because it pierces a security sandbox that until now has proved impervious to online attacks, KrebsonSecurity journalist Brian Krebs reported on Wednesday. The security mechanism is designed to minimize the damage of attacks that exploit buffer overflows and other types of software bugs by isolating Web content from sensitive parts of the underlying operating system.
Click to expand...

Article

Log in or Sign up

Adobe Reader Zero-Day Exploit Being Sold Online

Mman79 Registered Member

elapsed Registered Member

siljaline Registered Member

Log in or Sign up

Adobe Reader Zero-Day Exploit Being Sold Online

Mman79 Registered Member

elapsed Registered Member

siljaline Registered Member

Useful Searches