Comments on: Quickpost: Preventing the /Launch Action “cmd.exe” Bypass

By: escape from PDF | Linux-backtrack.com

escape from PDF | Linux-backtrack.com — Sat, 19 Feb 2011 21:21:48 +0000

[...] Stevens – Preventing the /launch action « cmd.exe » bypass – http://blog.didierstevens.com/2010/07/04/quickpost-preventing-the-launch-action-cmd-exe-bypass/9 – aout 2010 – Bkis – Adobe fixed /launch function vulnerability – [...]

By: Code for Shortcut Zero-Day Exploit is Public | Computer Security Articles

Code for Shortcut Zero-Day Exploit is Public | Computer Security Articles — Mon, 19 Jul 2010 22:26:10 +0000

[...] Stevens (well known for his research on Adobe Reader’s /launch feature) tested the exploit with his Ariad tool [...]

By: Code for Shortcut Zero-Day Exploit is Public | Data Protection and Recovery Center

Mon, 19 Jul 2010 17:55:57 +0000

[...] Stevens (well known for his research on Adobe Reader’s /launch feature) tested the exploit with his Ariad tool [...]

By: Week 27 in Review – 2010 | Infosec Events

Week 27 in Review – 2010 | Infosec Events — Mon, 12 Jul 2010 10:31:48 +0000

[...] Quickpost: Preventing the /Launch Action “cmd.exe” Bypass – didierstevens.com Adobe has released a new Adobe Reader version that contains functionality to block my /Launch action PoC, but Bkis found a bypass. [...]

By: Förhindra "/Launch Action cmd.exe" i adobe Reader 9.3.3 - upstream - Blog: Upstream - Telligent

Fri, 09 Jul 2010 10:55:53 +0000

[...] Problemet beskrivs på IDG men kan beskrivs mer tekniskt här. [...]

By: Uppdaterade Adobe Reader procedurer i vår Community - upstream - Blog: Upstream - Telligent

Thu, 08 Jul 2010 13:01:23 +0000

[...] procedurer i vår Community samt att vi även har en fix på gång för detta problem. Kanske inte så stor attackyta på detta än, men varför inte se till [...]

By: Adobe FAIL: PDF bug still unfixed – IndyPosted

Adobe FAIL: PDF bug still unfixed – IndyPosted — Wed, 07 Jul 2010 04:11:56 +0000

[...] researcher Didier Stevens posted in his blog the reason why the bug remains unfixed: I did some research and discovered that Adobe implemented a [...]

By: Didier Stevens

Didier Stevens — Tue, 06 Jul 2010 21:05:50 +0000

@Ted Wood The /Launch action is supported on *Nix and Mac editions of Adobe Reader too, and they’ve also add this blacklist.

By: Ted Wood

Ted Wood — Tue, 06 Jul 2010 20:37:50 +0000

Does this issue only affect Windows, or other platforms, as well? If it does affect other platforms, I wonder how they implemented the blacklist.

By: Adobe's protection against embedded scripts incomplete

Adobe's protection against embedded scripts incomplete — Tue, 06 Jul 2010 12:55:59 +0000

[...] [...]