[MCAFEE]Analyzing the First ROP-Only, Sandbox-Escaping PDF Exploit

[igor51]

Analyzing the First ROP-Only, Sandbox-Escaping PDF Exploit

The winter of 2013 seems to be “zero-day” season. Right after my colleague Haifei Li analyzed the powerful Flash zero day last week, Adobe sent a security alert for another zero-day attack targeting the latest (and earlier) versions of Adobe Reader. Unlike Internet Explorer zero-day exploits that we have seen in the past, this Reader Read more...
Source: Analyzing the First ROP-Only, Sandbox-Escaping PDF Exploit