Full Disclosure mailing list archives
In-depth research on the recent PDF zero-day exploit (CVE-2009-3459)
From: cocoruder <cocoruder () gmail com>
Date: Sun, 18 Oct 2009 21:32:29 -0700
Hi there, Just want to let you know, the Fortinet's FortiGuard Global Security Research Team has provided an in-depth research on the recent PDF zero-day exploit (CVE-2009-3459). http://www.fortiguard.com/analysis/pdfanalysis.html "Taking a look back over this 0-day attack as a whole, each single part of it is somehow ingenious - whether it be the vulnerability, operational exploitation, the logic behind it, the way to leverage it or the final shellcode. The exploitation method through the heap overflow, which may also be used in future Adobe Reader exploits, is particularly innovative in itself." _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- In-depth research on the recent PDF zero-day exploit (CVE-2009-3459) cocoruder (Oct 18)