[Full-disclosure] 0-day PDF exploit

[biz4rre at gmail.com]

...some additional information about 0day PDF exploit PoC:

Please download and open PDF PoC _locally_ in Adobe Acrobat (not in Adobe
Acrobat ActiveX control
because of some internal restrictions within Adobe ActiveX, it may be
bypassed via:
http://seclists.org/bugtraq/2007/Oct/0213.html but i didn't made tests).

Also make sure that "mailto" handler is set to Internet Explorer 7 (any 3rd
party mail
clients is not installed).

PoC tested on WinXP SP2 Eng updated + Internet Explorer 7 + Adobe Acrobat
Reader 8.1

PoC: http://security.fedora-hosting.com/0day/pdf/pdf_poc.pdf
Details: http://security.fedora-hosting.com/0day/pdf/pdf_poc.txt


regards,
cyanid-E <biz4rre at gmail.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20071016/29c07672/attachment.html