Full Disclosure mailing list archives
Re: 0-day PDF exploit
From: <full-disclosure () hushmail com>
Date: Tue, 16 Oct 2007 11:37:36 -0400
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear 3APAPA, Please configure your Internet Exploring mechanisms in a fashion compliant with my exploitation technologies to demonstrate the severity of my proof of concept attack tools. Here is a list of criteria to fulfill to make the hacker attack possible. This is severe! Millions who follow the instructions in detail might be vulnerable under the right situations sometimes... yawn. - -JP<i dont use apostrophes> On Tue, 16 Oct 2007 11:27:23 -0400 biz4rre () gmail com wrote:
...some additional information about 0day PDF exploit PoC: Please download and open PDF PoC _locally_ in Adobe Acrobat (not in Adobe Acrobat ActiveX control because of some internal restrictions within Adobe ActiveX, it may be bypassed via: http://seclists.org/bugtraq/2007/Oct/0213.html but i didn't made tests). Also make sure that "mailto" handler is set to Internet Explorer 7 (any 3rd party mail clients is not installed). PoC tested on WinXP SP2 Eng updated + Internet Explorer 7 + Adobe Acrobat Reader 8.1 PoC: http://security.fedora-hosting.com/0day/pdf/pdf_poc.pdf Details: http://security.fedora-hosting.com/0day/pdf/pdf_poc.txt regards, cyanid-E <biz4rre () gmail com>
-----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Charset: UTF8 Version: Hush 2.5 wpwEAQECAAYFAkcU2sAACgkQ+dWaEhErNvTD2AP9GWi6tgjXfSS6mmSEcNXCngEnJAXf 8p8i57pby3KmK6Os29OeesSIedRgM81MxrF8bZ2itPpNYtyrVAC5ztWEfAVJDP01z9CL 93B9OS/IdedZSvXokQAHrtEdO6wZHarddeE772GG3RfWlY5a/SA8agWUIkGAALugJyvR gPyqE40= =sCNw -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- 0-day PDF exploit biz4rre (Oct 16)
- Re: 0-day PDF exploit phioust (Oct 16)
- Re: 0-day PDF exploit biz4rre (Oct 16)
- Re: 0-day PDF exploit cocoruder . (Oct 16)
- Re: 0-day PDF exploit eric (Oct 17)
- Re: 0-day PDF exploit Justin Klein Keane (Oct 17)
- Re: 0-day PDF exploit cocoruder . (Oct 17)
- Re: 0-day PDF exploit eric (Oct 17)
- Re: 0-day PDF exploit gboyce (Oct 19)
- <Possible follow-ups>
- 0-day PDF exploit biz4rre (Oct 16)
- Re: 0-day PDF exploit full-disclosure (Oct 16)
- Re: 0-day PDF exploit full-disclosure (Oct 16)
- Re: 0-day PDF exploit full-disclosure (Oct 16)
- Re: 0-day PDF exploit full-disclosure (Oct 17)
- Re: 0-day PDF exploit phioust (Oct 16)