Hacker Finds Multiple PDF Backdoors

Gungadin writes "Eweek.com has a story about a British security researcher figuring out a way to manipulate legitimate features in Adobe PDF files to open backdoors for computer attacks. David Kierznowski, a penetration testing expert specializing in Web application testing, has released proof-of-concept code and two sample PDF files to demonstrate how the Adobe Reader program can be rigged to launch Web-based attacks without any user action. He claims there are least seven different ways to backdoor a PDF."

Heh

[Shawn is an Asshole]

<beavis_and_butthead>
Huh huh, penetration.
</beavis_and_butthead>

Who started giving this title?

Re:Heh

[SanityInAnarchy]

Speaking of buttheads, probably the same person who decided to call it a "backdoor".

AH, ZONK, YOU AND YOUR BACKDOOR PENETRATION STORYS

[CmdrTaco (troll)]

You sure have a thing for them.

pr0n

[User 956]

He claims there are least seven different ways to backdoor a PDF.

I've seen quite a bit of pr0n. There's way more than seven ways.

Sources claim...

[Mikachu]

Sources claim the exploits would have been found sooner if any other hackers had the patience to wait for PDFs to load.

clarification

[User 956]

that's assuming that by "PDF", he means "Pretty Drunk Female"....

Penetration

[SauroNlord]

David Kierznowski, a penetration testing expert I wish I was a penetration test expert!

Re:Evince, etc.

[Anonymous Coward]

Did you file a bug to let them know they didn't support the exploit? This is free software, they should get right on it.

Re:Doesn't work on Linux

[flyingfsck]

Hmm, Linux just isn't ready for the desktop yet.

da ladies...

[ScottyMcScott]

future mother-in-law: so, what do you do?
guy: i'm a penetration tester.
....fill in rest.....

Load PDFs in milliseconds

[this great guy]

Even faster ! [informationweek.com]