Zero day PDF exploit for Adobe Acrobat<br><br><br>Link to exploit:<br><br>Please download and open it locally in Adobe Acrobat (not in Adobe Acrobat ActiveX control):<br><br><a href="http://security.fedora-hosting.com/0day/pdf/pdf_poc.pdf">
http://security.fedora-hosting.com/0day/pdf/pdf_poc.pdf</a><br><br><br>Description:<br><br>0-day proof of concept (PoC) exploit for Adobe Acrobat.<br><br><br>Software affected:<br><br>+ Adobe Reader 8.1 (and earlier)<br>+ Adobe Acrobat Standard, Pro and Elements
8.1 (and earlier)<br>+ Adobe Acrobat 3D<br><br><br>System affected:<br><br>+ Windows XP with IE7<br><br><br>Details:<br><br>To view exploit code in Adobe Acrobat go to: Pages -> Page Properties -> Actions<br>(trigger: Page Open, action: Open a web link)
<br><br>This is URL handling bug in shell32!ShellExecute()<br><br><br>Workaround:<br><br>Currently unavailable.<br><br><br>Thanks to:<br><br>pdp (at) <a href="http://gnucitizen.org">gnucitizen.org</a> for his investigation
<br><br><br>regards,<br>cyanid-E <<a href="mailto:biz4rre@gmail.com">biz4rre@gmail.com</a>><br><br><br>