PDF.Exploit

 Information about the PDF.Exploit:

PDF.Exploit takes advantage of vulnerability in Adobe Acrobat and Adobe Reader 8.1. This could allow remote code execution as explained in the Adobe website CVE-2007-5020. All computers running Windows XP or Windows 2003 operating systems with Internet Explorer 7 are vulnerable to this exploit.

An exploit code arrives as a malicious PDF file in an attachment from a spammed email sent by another malware or malicious user. If the attacker successfully exploits this vulnerability then this could connects to FTP site ftp://{BLOCKED}.{BLOCKED}.146.130/ldr.exe to download and execute a malicious file. It also disable Windows built-in Firewall by executing a netsh command.

 Patching PDF.Exploit Vulnerability:

Adobe has released a update for this vulnerability. It can be downloaded from:

http://www.adobe.com/support/security/bulletins/apsb07-18.html

Users are advised to download and apply this update to remove the vulnerability inherent in the system.

This exploit was discovered on October 30, 2007.

Download the FREE Evaluation copy of Protector Plus antivirus software