Thursday, July 23, 2009
PDF: Flashy, but insecure again
A brand new security exploit in PDF allows an attacker to plant malware on the computer of unsuspecting people receiving PDF documents, read the overview here.
Javascript is not the attack vector this time, it's the embedded Flash runtime mandated by the PDF 1.8 spec that presents itself useful to exploiters.
Oh dear. ¶ 14:08
A brand new security exploit in PDF allows an attacker to plant malware on the computer of unsuspecting people receiving PDF documents, read the overview here.
Javascript is not the attack vector this time, it's the embedded Flash runtime mandated by the PDF 1.8 spec that presents itself useful to exploiters.
Oh dear. ¶ 14:08
