Re: Adobe 0-day in the wild

[Dragos Ruiu <dr () kyx net>]

On 23-Feb-09, at 1:16 PM, nick hatch wrote:

> Anyone know about a proof-of-concept PDF for this one? eg something  
> that uses a PDF to launch calc or similar. AV vendors are promising  
> detection, but I'd love to get my hands on something that I can use  
> to test our perimeter and the vectors for this myself.

Are you talking about last week's Adobe PDF 0day, or this morning's one?

http://milw0rm.com/exploits/8099

cheers,
--dr

--
World Security Pros. Cutting Edge Training, Tools, and Techniques
Vancouver, Canada  March 16-20 2009  http://cansecwest.com
London, U.K. May 27/28 2009 http://eusecwest.com
pgpkey http://dragos.com/ kyxpgp

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.