New zero-day flaw uncovered in Adobe PDF files

Tech News

By Stevie Smith Sep 24, 2007, 13:49 GMT

UK security researcher ‘Petko Petkov,’ who recently uncovered zero-day flaws in Apple’s QuickTime media player and also Microsoft’s Windows Media Player, has now shone the spotlight of concern on a new severe vulnerability in Adobe Inc.’s PDF file system. epa00793127 PC systems facing potential zero-day vulnerability via newly discovered Adobe PDF expoit. EPA/IBM/HO

epa00793127 PC systems facing potential zero-day vulnerability via newly discovered Adobe PDF expoit. EPA/IBM/HOAccording to Petko Petkov, the newly discovered PDF zero-day flaw can potentially be exploited in order for hackers to gain control of PC hardware running on Microsoft Windows XP operating systems, reports PC World."Adobe Acrobat/Reader PDF documents can be used to compromise your Windows box," outlined the penetration tester on his blog at the tail end of last week, adding that all that is required to fall foul of the vulnerability "is to open a PDF document or stumble across a page, which embeds one."While Petko Petkov has not yet offered any cast-iron evidence (proof-of-concepts) to confirm his PDF expoit – something he certainly does usually, and did with the QuickTime and Windows Media Player vulnerabilities – Internet security expert Symantec has placed enough stock in previous confirmations to support the security researcher’s alarm. "Although these claims are currently unverifiable, this researcher has identified several vulnerabilities in the past and is likely credible regarding these findings," commented California-based Symantec Corporation. By way of a temporary solution prior to an official patch fix being published by Adobe, Petko Petkov offers that users should avoid opening any and all PDF files, both locally and remotely. He also offers that the vulnerability has been located in Adobe’s Acrobat Reader 8.1, and is open to exploitation through the SP2 edition of Windows XP.

View blog reactions

If you liked this story please support M&C and Buzz the site on Yahoo.

Latest Headlines in Tech

Talkback

There are currently no comments for this article. Be the first to comment! (no registration required)

Latest from M&C Blogs

Debate: did McCain do enough? - Global Eye on September 29, 2008 6:46 AM | Permalink | Comments (19) | TrackBacks (1)

Should Sen. John McCain's health records be made public? - Global Eye on September 15, 2008 8:39 AM | Permalink | Comments (49) | TrackBacks (0)

Propaganda and the campaign for president - Global Eye on September 9, 2008 7:12 AM | Permalink | Comments (10) | TrackBacks (0)

London Film Festival - Dean Spanley - London Calling on October 6, 2008 9:38 AM | Permalink | Comments (0) | TrackBacks (0)

Raindance Film Festival: Gardens Of The Night - London Calling on October 6, 2008 9:21 AM | Permalink | Comments (4) | TrackBacks (0)

London Film Festival - IL DIVO Review - London Calling on October 1, 2008 3:46 PM | Permalink | Comments (0) | TrackBacks (0)

Bugatti Veyron 16.4 Grand Sport - The World in Pictures on October 2, 2008 4:15 PM | Permalink | Comments (0) | TrackBacks (0)

Devotee to Chinese Shrine of Sapam has face pierced - The World in Pictures on October 2, 2008 4:13 PM | Permalink | Comments (0) | TrackBacks (0)

Indian Muslims offer prayers on the occasion of Eid-al-Fitr - The World in Pictures on October 2, 2008 4:11 PM | Permalink | Comments (1) | TrackBacks (0)

Tech

New zero-day flaw uncovered in Adobe PDF files

Tech News

Latest Headlines in Tech

Talkback

Latest from M&C Blogs

Similar articles

In Monsters and Critics

Corporate

The Fine Print