bugtraq - In-depth research on the recent PDF zero-day exploit (CVE-2009-3459)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <3d7a6e870910182132q71aaaa74v5d218a02a0b3dbdb@mail.gmail.com>
Date: Sun, 18 Oct 2009 21:32:29 -0700
From: cocoruder <cocoruder@...il.com>
To: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com,
	dailydave@...ts.immunitysec.com
Subject: In-depth research on the recent PDF zero-day exploit (CVE-2009-3459)

Hi there,

Just want to let you know, the Fortinet's FortiGuard Global Security
Research Team has provided an in-depth research on the recent PDF
zero-day exploit (CVE-2009-3459).

http://www.fortiguard.com/analysis/pdfanalysis.html

"Taking a look back over this 0-day attack as a whole, each single
part of it is somehow ingenious - whether it be the vulnerability,
operational exploitation, the logic behind it, the way to leverage it
or the final shellcode. The exploitation method through the heap
overflow, which may also be used in future Adobe Reader exploits, is
particularly innovative in itself."