[This blog was primarily written by Xiaoning Li of Intel Labs, with assistance from Peter Szor of McAfee Labs.] In February 2013, the Adobe Product Security Incident Response Team (PSIRT) released security advisory APSA13-02. In that report they listed two vulnerabilities (CVE-2013-0640 and CVE-2013-0641) that were widely exploited. At Intel Labs and McAfee Labs we Read more…
Tags: Adobe, Adobe Reader, APSA13-02, ASLR, CVE-2013-0640, CVE-2013-0641, DEP, PDF, return-oriented programming, ROP, stack pivoting
Update on May 2 Adobe has confirmed this vulnerability and has scheduled a patch release for May 14. Looking back this year’s RSA Conference, you might have the feeling that the current threat landscape is primarily a series of advanced attacks. This concept includes well-known advanced persistent threats (APTs) and zero-day vulnerability exploits. To Read more…
Tags: 0 day vulnerability, Adobe Reader, Advanced Persistent Threat, APT, detection, email tracking service, exploit, PDF, tracking usage, Zero-Day
The winter of 2013 seems to be “zero-day” season. Right after my colleague Haifei Li analyzed the powerful Flash zero day last week, Adobe sent a security alert for another zero-day attack targeting the latest (and earlier) versions of Adobe Reader. Unlike Internet Explorer zero-day exploits that we have seen in the past, this Reader Read more…
Tags: Adobe Reader, broker, JavaScript, PDF, ROP, sandbox, shellcode, XFA, Zero-Day
Exploit kits are toolkits that are used to build malware components such as binaries and scripts. They automate the exploitation of client-side vulnerabilities, targeting browsers and programs. These exploit kits provide an effective way for cybercriminals to distribute malware without the users consent. Among these kits, the Blackhole exploit kit is one of the most Read more…
Tags: Adobe Reader, Exploit Kit, exploits, java, Red Kit, vulnerabilities, vulnerability
Posts tagged under Adobe Reader