Comments on: Update: Escape From PDF http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/ (blog 'DidierStevens) Wed, 08 Feb 2012 19:23:01 +0000 hourly 1 http://wordpress.com/ By: How to protect from dangerous PDF files | Razmisljanja sistemca http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/#comment-38491 Sun, 09 May 2010 01:00:33 +0000 http://blog.didierstevens.com/?p=2119#comment-38491 [...] Most users think PDF format is highly secure document format, but in reality for some time now experts warn that this is not true anymore. PS: This is potential danger only in the Windows environment PPS: please application programmers to organize your applications that pdf file format can be opened by any reader, not just Adobe, which happens too often via Didier Stevens blog Update-escape-from-pdf [...]

]]> By: Kako se zavarovati pred vse bolj nevarnimi PDF dokumenti | Razmišljanja sistemca | Reflections of sysadmin http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/#comment-38372 Wed, 28 Apr 2010 06:38:16 +0000 http://blog.didierstevens.com/?p=2119#comment-38372 [...] Didier Stevens blog Update-escape-from-pdf var a2a_config = a2a_config || {}; a2a_config.linkname="Kako se zavarovati pred vse bolj [...]

]]> By: Jeremy Allen http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/#comment-38253 Tue, 13 Apr 2010 18:44:47 +0000 http://blog.didierstevens.com/?p=2119#comment-38253 Didier: I hope you didn’t mind us taking a crack at it. I was able to get a pretty crude version of your idea working after listening to your podcast. I am really interested to see how you did things!

Check out the PoC I came up with at http://bit.ly/cR47tg

]]> By: juza http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/#comment-38251 Tue, 13 Apr 2010 10:40:07 +0000 http://blog.didierstevens.com/?p=2119#comment-38251 My download and execute PoC -> http://vimeo.com/10883643

]]> By: Week 14 in Review – 2010 | Infosec Events http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/#comment-38240 Mon, 12 Apr 2010 08:39:55 +0000 http://blog.didierstevens.com/?p=2119#comment-38240 [...] Update: Escape From PDF – didierstevens.com The interesting thing about this fix is that it breaks my Foxit PoC, but that the Adobe PoC works for Foxit now! [...]

]]> By: yunsoul http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/#comment-38231 Sat, 10 Apr 2010 06:40:46 +0000 http://blog.didierstevens.com/?p=2119#comment-38231 I make a simple tool in order to disable the Adobe Reader’s Launch Action & JavaScript option.

=> http://blog.naver.com/happyme9/130084033060

]]> By: Blog http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/#comment-38228 Fri, 09 Apr 2010 23:36:04 +0000 http://blog.didierstevens.com/?p=2119#comment-38228 To Catch a PDF Hacker, You Have To Think Like One…

Despite the improvements Adobe has developed for Acrobat and Reader, it’s still tough to stay on top of creative hackers who love to use the PDF.   To that end, security researchers like Didier Stevens finds ways to hack into an application in ord…

]]> By: earthsound http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/#comment-38207 Thu, 08 Apr 2010 19:23:26 +0000 http://blog.didierstevens.com/?p=2119#comment-38207 @Fabricio: PDF-XChange Viewer is not “safe”, in that it supports the /Launch commmand.

Didier’s example PDF did not include a path. If it had, PDF-XChange Viewer would have opened the command prompt.

You can use notepad to edit his PDF and change cmd.exe to C:\\\\WINDOWS\\\\system32\\\\calc.exe and try opening it it PDF-XChange Viewer.

]]> By: Fabricio Garcia http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/#comment-38202 Thu, 08 Apr 2010 08:22:58 +0000 http://blog.didierstevens.com/?p=2119#comment-38202 Thank you and thanks for your research…

]]> By: Cumhur Kara http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/#comment-38200 Thu, 08 Apr 2010 07:54:35 +0000 http://blog.didierstevens.com/?p=2119#comment-38200 Zemana also demonstrate download and exec poc based on yours poc.
http://blog.zemana.com/2010/04/escape-from-pdf-modified-by-zemana.html

Cumhur Kara (Turkey)

]]>