Follow Slashdot blog updates by subscribing to our blog RSS feed


Forgot your password?

Submission + - JBIG2Decode PDF Vulnerability Auto-Exploited (

SkiifGeek writes: "With Adobe's patch for the JBIG2Decode vulnerability due in a few days time, new methods to target the vulnerability have been discovered that make it far riskier than previously thought. Didier Stevens recently showed the world how it is possible to exploit the vulnerability without the user actually opening an affected file, now he has discovered a way that allows for completely automated exploitation that results in anything up to a Local System account without any user interaction at all and only relies upon basic Windows components and Acrobat Reader elements.

There are some mitigating factors that limit the overall risk of this new discovery, but it does also highlight that merely uninstalling the Reader will not protect you from exploitation and does raise the possibility that other tools will access the vulnerable components and thus be vectors for attack."

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

JBIG2Decode PDF Vulnerability Auto-Exploited

Comments Filter:

Life in the state of nature is solitary, poor, nasty, brutish, and short. - Thomas Hobbes, Leviathan