Topic: PDF Vulnerability Now Exploitable With No Clicking (JBIG2 vulnerability)

[Samker]

"With Adobe's patch for the current PDF vulnerability still some time away, news has emerged of more techniques that are available to exploit the vulnerability, this time without needing the victim to actually open a malicious file. Instead, the methods make use of a Windows Explorer Shell Extension that is installed alongside Adobe Reader, and which will trigger the exploitable code when the file is interacted with in Windows Explorer. Methods have been demonstrated of successful exploitation with a single click, with thumbnail view, and with merely hovering the mouse cursor over the affected file. There are many ways that exploits targeting the JBIG2 vulnerability could be hidden inside a PDF file, and it seems that the reliability of detection for these varying methods is spotty, at best."

(Slashdot)

[Steve_53]

I am constantly downloading (work related and other) PDF files - is there ANYTHING currently available that can be used to scan PDF files to detect JBIG2?

Steve

[Samker]

I am constantly downloading (work related and other) PDF files - is there ANYTHING currently available that can be used to scan PDF files to detect JBIG2?

Steve

I think that CheckPoint have (authors of Zona Alarm Firewalls) have some solution.

Take a look here: http://www.checkpoint.com/defense/advisories/public/announcement/022509-adobe-pdf-protection.html

Also Steve, if you find something interesting for SCF Community please make new Topic with protection solutions and recommendations ...