关键的 Acrobat Reader 安全漏洞使 Windows 面临任意攻击

发布于 2007-09-23

Summary: A security researcher named "pdp" claims to have found a critical Adobe Acrobat software exploit affecting Windows XP SP2 and Windows 2003. It works in both stand-alone and web page embedded modes and also affects some like Foxit Reader. The exploit uses a scripting language flaw to run executable programs like Calculator and Notepad. It could be used to run malware if already downloaded. pdp has contacted Adobe which "confirmed" the issue and also found a QuickTime flaw. To prevent copycat hackers, pdp won't reveal details until patches are available. Hacking is becoming more serious and about making money. Until a PDF patch, users should avoid PDF files or those from unknown users.
Main Points:
- "pdp" found a critical Adobe Acrobat exploit for Windows.
- Affects specific Windows versions and some PDF readers.
- Exploit uses scripting language to run programs.
- Could lead to malware if malware is already on the computer.
- pdp contacted Adobe and won't reveal details yet.
- Hacking is more serious and about making money.
- Users should avoid PDF files from unknown sources until a patch.
Key Information:
- "pdp" is the researcher.
- Affected software versions and systems.
- How the exploit works and its potential.
- pdp's actions and Adobe's response.
- Trend of hacking and user behavior.
Important Details:
- The exploit works in different modes and affects some PDF readers differently.
- The tested programs were Calculator and Notepad.
- Malware can be delivered in various ways including in a.ZIP file.
- Hacking is now more serious and for criminal organizations.
- Users' behavior in updating different software.

阅读 9