Malicious PDFs don’t need software vulnerability
April 8, 2010 by Sam NarisiPosted in: In this week's e-newsletter, Latest News & Views, Security
Security researchers have found a way hackers can spread malware via malicious PDF files — even when there are no security holes present in the software that opens the document.
Researcher Didier Stevens found that by embedding executable files in PDF documents, hackers could run malicious code on the victim’s computer when the file is opened in either Adobe or Foxit PDF reader software.
The hack works even when the software has no security vulnerabilities, Network World reports.
If the document is opened in Adobe, users have to answer a dialog box before the code is run. However, a hacker could modify the message to persuade the user to allow the code to execute.
Both software makers have been notified and are reported working on a software fix to block this type of attack. We’ll keep you posted.
DocuCrunch.com delivers the latest IT and Imaging news once a week to the inboxes of over 200,000 IT and Imaging professionals.
Click here to sign up and start your FREE subscription to DocuCrunch!
Tags: Adobe, Foxit, malicious code, PDF
Loading ...
May 3rd, 2010 at 6:00 am
[...] that allows PDF readers to launch executable files. The method of attack was discovered and reported on a few weeks [...]
July 20th, 2010 at 10:28 am
[...] earlier this year, we reported on another attack that didn’t make use of a security bug, but rather exploited PDF [...]