what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Adobe Acrobat Script Injection

Posted Jan 14, 2010

Authored by Paul Theriault | Site stratsec.net

A vulnerability exists within the Forms Data Format (FDF) built into Adobe Acrobat Reader which allows an attacker to inject JavaScript into a Portable Document Format (PDF) file from any domain on the internet. Successful exploitation of this issue results in the potential disclosure of sensitive information or other cross-domain attacks including cross-site scripting. Adobe Reader and Acrobat versions 9.2 and 8.1.7 and earlier versions are affected.

tags | exploit, javascript, xss

advisories | CVE-2009-3956

SHA-256 | 11aefc4cc22cb57b7a9c981675a064416678a375d13937f94dd4c761ccfb4031

Download | Favorite | View

Related Files

No related files