Comments on: Quickpost: No Escape From PDF

By: escape from PDF | Linux-backtrack.com

escape from PDF | Linux-backtrack.com — Sat, 19 Feb 2011 21:21:09 +0000

[...] droits de l’utilisateur [5]. Cette vulnérabilité a été en partie patchée en juin 2010 [6], puis un moyen de contourner le patch a été publié en juillet [7]. Un nouveau patch a été [...]

By: Quickpost: Preventing the /Launch Action “cmd.exe” Bypass « Didier Stevens

Sun, 04 Jul 2010 21:20:13 +0000

[...] Stevens @ 21:20 Adobe has released a new Adobe Reader version that contains functionality to block my /Launch action PoC, but Bkis found a bypass: just put double quotes around cmd.exe, like this: [...]

By: Adobe fix still allows “Escape from PDF” | MEDOIX

Adobe fix still allows “Escape from PDF” | MEDOIX — Thu, 01 Jul 2010 06:02:27 +0000

[...] has taken Adobe three months to release the patch. On the blog entry, Didier confirms that Adobe has completely fixed the flaw. However the patch turns out to be [...]

By: Royal

Royal — Thu, 01 Jul 2010 04:45:12 +0000

Didier, Please escape form PDF
http://blog.bkis.com/en/adobe-fix-still-allows-escape-from-pdf/

By: Paul

Paul — Thu, 01 Jul 2010 01:01:22 +0000

Did you see this reference to an easy bypass of the ‘fix’? It appears in comments to ISC’s story on the patch.
http://blog.bkis.com/en/adobe-fix-still-allows-escape-from-pdf/

By: Wim

Wim — Wed, 30 Jun 2010 21:17:16 +0000

I know this is a lazy comment but can you confirm that either the /Launch command can not be enabled or that if it can be (through registry setting?), the message box is still mandatory and can not be modified ?

By: Didier Stevens

Didier Stevens — Wed, 30 Jun 2010 16:52:45 +0000

@Nobody Will disclose this at Brucon.org

By: zhane

zhane — Wed, 30 Jun 2010 14:07:32 +0000

time to come up with some other attacks

By: Adobe Reader and Acrobat updates close 17 critical holes

Adobe Reader and Acrobat updates close 17 critical holes — Wed, 30 Jun 2010 12:58:12 +0000

[...] applications" feature will be disabled by default. Alert dialogues will also no longer display the parameters submitted by the attacker, which could confuse users, instead only displaying the [...]

By: Nobody

Nobody — Tue, 29 Jun 2010 22:04:38 +0000

Time to disclosure details about change pop-up message?