[framework] new adobe exploit

Brian Milliron antechrist at io.com
Tue Jan 5 17:08:34 PST 2010


Kudos to the dev team on the new doc.media.newPlayer exploit.  I didn't
even notice it had been added to the build until now.  I can't wait to
test it out.  Will let you know what versions I test.  FYI, here is an
analysis of some highly sophisticated wild code for this exploit which
is using an egg hunt to execute multiple payloads and then opens a valid
pdf after crashing the reader so the user doesn't notice anything.
http://isc.sans.org/diary.html?storyid=7867

Cheers,
Brian



More information about the framework mailing list