New Attacks Leverage Adobe Sandbox Bypass Against Uyghur Activists

🗓️ 14 Mar 2013 16:06:31Reported by Michael MimosoType

New attacks leverage Adobe sandbox bypass against Uyghur activists. Attackers in China exploit Adobe Reader vulnerability [CVE-2013-0640] using spear phishing with malicious PDFs posing as party invitations and authorization forms to install remote access trojan

Reporter	Title	Published	Views	Family All 62
canvas	Immunity Canvas: ACROBAT_XFA	14 Feb 201301:55	–	canvas
Tenable Nessus	Adobe Acrobat <= 11.0.1 / 10.1.5 / 9.5.3 Multiple Vulnerabilities (APSA13-02)	15 Feb 201300:00	–	nessus
Tenable Nessus	Adobe Acrobat < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)	21 Feb 201300:00	–	nessus
Tenable Nessus	Adobe Reader <= 11.0.1 / 10.1.5 / 9.5.3 Multiple Vulnerabilities (APSA13-02)	15 Feb 201300:00	–	nessus
Tenable Nessus	Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)	21 Feb 201300:00	–	nessus
Tenable Nessus	GLSA-201308-03 : Adobe Reader: Multiple vulnerabilities	23 Aug 201300:00	–	nessus
Tenable Nessus	Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSA13-02, APSB13-07) (Mac OS X)	21 Feb 201300:00	–	nessus
Tenable Nessus	openSUSE Security Update : acroread (openSUSE-SU-2013:0335-2)	13 Jun 201400:00	–	nessus
Tenable Nessus	RHEL 5 / 6 : acroread (RHSA-2013:0551)	22 Feb 201300:00	–	nessus
Tenable Nessus	SuSE 11.2 Security Update : acroread (SAT Patch Number 7397)	27 Feb 201300:00	–	nessus

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
threatpost	www.threatpost.com/adobe-investigating-reports-reader-zero-day-exploit-021313/
adobe	www.adobe.com/support/security/bulletins/apsb13-07.html
media	www.media.threatpost.com/wp-content/uploads/sites/103/2013/03/22110148/themysteryofthepdf0-dayassemblermicrobackdoor.pdf
blogs	www.blogs.norman.com/2011/security-research/invisible-ynk-a-code-signing-conundrum
microsoft	www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx