Nasty Adobe Reader Exploit

[Sidepocket]

A nasty little JavaScript hack that targets Adobe Reader 7.0 via weblinks to a PDF document on the web that was first revealed at the Chaos Computer Club convention in late December was found to be even nastier yesterday. The exploit works by putting JavaScript at the end of a link to a PDF file -- which Reader 7.0 runs, and yesterday a hacker realized that since Adobe Reader 7.0 installs a sample pdf file, the code could be used to get at all documents on a hard drive.

http://blog.wired.com/27bstroke6/2007/01/nasty_adobe_rea.html#comments

http://www.pcworld.com/article/id,128411/article.html

http://news.zdnet.com/2100-1009_22-6147428.html


Glad I bring teh Hacker and Sploit News to PLA. Its kind of like selling the DS to Korea, oh wait.