Slashdot Mirror


Hacker Finds Multiple PDF Backdoors

Gungadin writes "Eweek.com has a story about a British security researcher figuring out a way to manipulate legitimate features in Adobe PDF files to open backdoors for computer attacks. David Kierznowski, a penetration testing expert specializing in Web application testing, has released proof-of-concept code and two sample PDF files to demonstrate how the Adobe Reader program can be rigged to launch Web-based attacks without any user action. He claims there are least seven different ways to backdoor a PDF."

5 of 147 comments (clear)

  1. pr0n by User+956 · · Score: 5, Funny

    He claims there are least seven different ways to backdoor a PDF.

    I've seen quite a bit of pr0n. There's way more than seven ways.

    --
    The theory of relativity doesn't work right in Arkansas.
  2. Sources claim... by Mikachu · · Score: 5, Funny

    Sources claim the exploits would have been found sooner if any other hackers had the patience to wait for PDFs to load.

  3. Re:Evince, etc. by Anonymous Coward · · Score: 5, Funny

    Did you file a bug to let them know they didn't support the exploit? This is free software, they should get right on it.

  4. Load PDFs with Acrobat in seconds by dw604 · · Score: 5, Informative
  5. Re:Doesn't work on Linux by flyingfsck · · Score: 5, Funny

    Hmm, Linux just isn't ready for the desktop yet.

    --
    Excuse me, but please get off my Pennisetum Clandestinum, eh!