- Site menu:
- Latest Discussions
- Latest Newswire
- Archives
- Submit Story
- Story HOWTO
- Syndicate
- E-mail Alerts
Hacker finds a way to exploit PDF files, without a vulnerability
Although PDF viewers like Adobe Reader and Foxit Reader doesn’t allow embedded executables (like binaries and scripts) to be extracted and executed, Stevens discovered another way to launch a command (/Launch /Action), and ultimately run an executable he embedded using a special technique.
|
|
|
Comments (19)
Huh? What's that?
But everybody calls it fat.
Doesn't mean the same as in high school?
Then cr@p, this is a problem.
Years of forced labor for the crime of being young.
"so that there be not one stone left standing upon another, and salt sown in the ruins"
Good enough for Carthage, good enough for highschool.
Ok, I'm back.
PDF? Must see if Kpdf is vulnerable. Oh, poop, that's right, I'm using 3.5, so there won't be any fix.
>Oh, poop, that's right, I'm using 3.5, so there won't be any fix.
TOS!
Any effort to inject truthful KDE commentary is an affront to something or other.
You're right, Dino. I appologize.
"By Deng Xiao Ping's Capitalist Counter-revolution! I'm using KDE 3.5, Kpdf will no longer be updated! I'm Mao'd!"
Now you've done it. Now I'll have The Siamese Cat Song running through my head all day (they are asiatic cats, after all).
Too headstrong and self-centered for the Feline's Republic.
New around here?
I was told so (it starts calc.exe on Windows and something else on Mac).
Indeed, Okular is not vulnerable.
Post a comment
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:Sign up and post (it is free) or Log in and post
Evince is not compromised on Windows or Linux. I've tested it, using the proof of concept file.