Slashdot Mirror


Security Researcher Drops 15 Vulnerabilities for Windows and Adobe Reader

mask.of.sanity writes: Google Project Zero hacker Mateusz Jurczyk has dropped 15 remote code execution vulnerabilities, including a single devastating hack against Adobe Reader and Windows he reckons beats all exploit defenses. He said, "The extremely powerful primitive provided by the vulnerability, together with the fact that it affected all supported versions of both Adobe Reader and Microsoft Windows (32-bit) – thus making it possible to create an exploit chain leading to a full system compromise with just a single bug – makes it one of the most interesting security issues I have discovered so far." Jurczyk published a video demonstration of the exploit for 32-bit and 64-bit systems. His slides are here [PDF].

2 of 117 comments (clear)

  1. Re:PDF link to PDF exploit by drinkypoo · · Score: 3, Interesting

    Chrome does a fantastic job rendering pdfs very quickly.
    Why do you continue to use that pathetic browser?

    I use both browsers. I use Chrome mostly for google sites, and anything that won't load in Firefox. I use Firefox mostly because I want Chrome to have competition, but also because noscript is still better on FF than on Chrome. And also because chrome's built-in cookie control is total shit which breaks sites so you either don't use it or you have a hard time with many websites, but cookiesafe works great all the time.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  2. Re:Getting tired... by drinkypoo · · Score: 4, Interesting

    I use SumatraPDF. AFAIK it's the smallest windows PDF reader which is worth using, I believe it's smaller than Foxit. But it's been a while since I installed Foxit, so a comparison would take effort.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"