PDF Vulnerability Now Exploitable With No Clicking

SkiifGeek writes "With Adobe's patch for the current PDF vulnerability still some time away, news has emerged of more techniques that are available to exploit the vulnerability, this time without needing the victim to actually open a malicious file. Instead, the methods make use of a Windows Explorer Shell Extension that is installed alongside Adobe Reader, and which will trigger the exploitable code when the file is interacted with in Windows Explorer. Methods have been demonstrated of successful exploitation with a single click, with thumbnail view, and with merely hovering the mouse cursor over the affected file. There are many ways that exploits targeting the JBIG2 vulnerability could be hidden inside a PDF file, and it seems that the reliability of detection for these varying methods is spotty, at best."

Comments

Re:So, don't use Adobe Reader

[symes]

Sod it - I'm going back to plain text and ascii art.

Re: change it to meet your needs

[Anonymous Coward]

Dearest Joey

I have finally managed to make it display knitting patterns, so I updated the master source on sourceforge.

All my love,

Granny

Hold on

[rockbottoms]

My Adobe PDF is loading. I'll let you know if it's safe or not in about 5 minutes

Re:DONT CROSS THE STREAMS

[Waffle Iron]

You mean, even LaTeX is not safe against Viruses? What should we use then?

LaMbSkIn?