Adobe exploit in the wild

**Glaswegian** · 10-24-2007, 01:27 PM

A PDF file that attacks Adobe's Reader and Acrobat software has been released, just hours after a patch became available, according to Symantec.

"This mass mailing of exploit files may be an attempt to leverage the exposure window between patch release and widespread adoption of the fix," Symantec warned customers of its DeepSight threat intelligence network.

The rogue PDF is attached to spam, and arrives with a file name such as YOUR_BILL.pdf or INVOICE.pdf, said Symantec. It exploits the "mailto:" protocol vulnerability disclosed more than a month ago by UK-based researcher Petko Petkov.

http://www.techworld.com/security/ne...S&NewsID=10429

SpySentinel · 10-24-2007, 04:21 PM

Javacool Software has released a tool that patches the problem:

PDF MailTo Vulnerability Fix Tool

---------

Also, Adobe has released an updated version of Adobe Reader that fixes the issues:

More Info

Adobe Reader 8.1.1 --> update that fixes vulnerability

*Note: As of right now, the update can not be downloaded from Adobe Reader, you have to go to the website to download it.

10-24-2007, 01:27 PM	#1 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,482 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Adobe exploit in the wild A PDF file that attacks Adobe's Reader and Acrobat software has been released, just hours after a patch became available, according to Symantec. "This mass mailing of exploit files may be an attempt to leverage the exposure window between patch release and widespread adoption of the fix," Symantec warned customers of its DeepSight threat intelligence network. The rogue PDF is attached to spam, and arrives with a file name such as YOUR_BILL.pdf or INVOICE.pdf, said Symantec. It exploits the "mailto:" protocol vulnerability disclosed more than a month ago by UK-based researcher Petko Petkov. http://www.techworld.com/security/ne...S&NewsID=10429 __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

10-24-2007, 04:21 PM	#2 (permalink)
SpySentinel Registered User Join Date: May 2006 Location: The United States Posts: 378 OS: Windows XP SP2	Re: Adobe exploit in the wild Javacool Software has released a tool that patches the problem: PDF MailTo Vulnerability Fix Tool --------- Also, Adobe has released an updated version of Adobe Reader that fixes the issues: More Info Adobe Reader 8.1.1 --> update that fixes vulnerability *Note: As of right now, the update can not be downloaded from Adobe Reader, you have to go to the website to download it. __________________ Proud graduate of GeekU - Learn how to remove malware at GeekstoGo.com UNITE ASAP