New Adobe Reader vulnerability exploited in the wild
November 11st, 2008
Last week Adobe issued a security update which addressed several critical vulnerabilities in Adobe Reader and Acrobat versions. Three days later, malicious PDF documents appeared in the wild, exploiting an input validation issue in the util.printf JavaScript method (CVE-2008-2992) leading to remote code execution as reported by the fellow handlers at the Internet Storm Center.
With Proactive database update #102 we have extended our existing generic detection routine for any malicious PDF documents, named “Exploit.PDF.Shellcode.gen”, by an additional detection for this new vulnerability - named “Exploit.PDF.Utilprintf.gen”.
At the moment we are not aware of any of the notorious web exploit toolkits to leverage this new Adobe Reader vulnerability yet.
Author: Anti-Malware Team
Back to TrustedSource™ Blog overview
