Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?

+ - JBIG2Decode PDF Vulnerability Auto-Exploited->

Submitted by
SkiifGeek writes: "With Adobe's patch for the JBIG2Decode vulnerability due in a few days time, new methods to target the vulnerability have been discovered that make it far riskier than previously thought. Didier Stevens recently showed the world how it is possible to exploit the vulnerability without the user actually opening an affected file, now he has discovered a way that allows for completely automated exploitation that results in anything up to a Local System account without any user interaction at all and only relies upon basic Windows components and Acrobat Reader elements.

There are some mitigating factors that limit the overall risk of this new discovery, but it does also highlight that merely uninstalling the Reader will not protect you from exploitation and does raise the possibility that other tools will access the vulnerable components and thus be vectors for attack."

Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

JBIG2Decode PDF Vulnerability Auto-Exploited

Comments Filter:

The trouble with the rat-race is that even if you win, you're still a rat. -- Lily Tomlin