Sicurezza IT proattiva
 

Santosh Mallappa's entries

Santosh Mallappa

Junior Malware Analyst

He has 2 years of experience from analyzing malware for antivirus companies.

Adobe Reader PDF LibTiff Integer Overflow Code Execution   Commento [2]

Abstract

Vulnerability exists in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 where TIFF [Tagged Image File Format] is used to compile a PDF with shellcode which can do an arbitrary code execution making the host vulnerable. The twist is this does not use Java Script to do the exploit as we have seen for the past few days PDF Exploit mostly contains Java Script. After the exploit is done shellcode is executed triggering the malicious Trojan implanted in the system overriding the…