Malware Diaries - New Adobe Reader/Acrobat zero day vulnerability

Malware Diaries는 이번 신규 Adobe취약점에 대한 내용을 동영상으로 발표하였다.

- 원문보기 : http://blogs.paretologic.com/malwarediaries/index.php/2010/09/08/new-adobe-readeracrobat-zero-day-vulnerability

Security Researcher Mila Parkour has discovered a new zero-day exploit affecting Adobe Reader and Adobe Acrobat.

In her blog she posted some information about the file, which was sent as an email attachment.

Adobe has published a security bulletin for CVE-2010-2883 but hasn’t released a fix yet.

I verified the exploit on a fresh Windows 7 machine with the latest version of Adobe Reader. Upon opening the PDF document, a malicious file is downloaded.

We recommend users to be extremely careful when opening up email attachments as well as keeping their AV up-to-date with real time protection enabled.

Kudos to Mila for finding and sharing her discovery.

- 관련글

2010/09/09 - [취약점소식] - [Adobe] Security Advisory for Adobe Reader and Acrobat