Hacker Finds a Way to Exploit PDF Files, Without Vulnerability

SEE: Updated report with response from Adobe and FoxIt Software A security researcher has managed to create a proof-of-concept PDF file that executes an embedded executable without exploiting any security vulnerabilities. The PDF hack, when combined with clever social engineering techniques, coul...

New pdf 0day here-vulnerability warning-the black bar safety net

Source: alert7 Below this is old. http://insecureweb.com/%20/newish-web-based-pdf-attack-in-the-wild-with-real-exploit-code/ New pdf 0day here http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html Maybe you read Michael Howard's twitter feed. If so, you may be wondering why y...

security flaw

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing 1 DefineConstantPool, 2 ActionJump, 3 ActionPush, 4 ActionTry, and unspecified other actions, which allows...

CVE-2005-0064

Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength value...

USN-64-1: xpdf, CUPS vulnerabilities

A buffer overflow has been found in the xpdf viewer. An insufficient input validation of the encryption key length could be exploited by an attacker providing a specially crafted PDF file which, when processed by xpdf, could result in abnormal program termination or the execution of attacker...

DSA-648-1 xpdf - buffer overflow

Bulletin has no description...

DSA-573-1 cupsys - integer overflows

Bulletin has no description...

Adobe Unix Acrobat Reader 4.05.0 - WWWLaunchNetscape Buffer Overflow

Adobe Unix Acrobat Reader 4.05.0 - WWWLaunchNetscape Buffer Overflow source: https://www.securityfocus.com/bid/8069/info An individual has reported that Adobe Acrobat Reader for Unix systems is vulnerable to a buffer overflow condition. The error is allegedly related to the processing of...