CVE-2010-0188, APSB10-07 PDF Exploit demonstration
Adobe Reader has been recently updated to version 9.3.1, fixing a vulnerability for LibTiff "TIFFReadDirectory" function.
This vulnerability originated from CVE-2006-3459 was reported by Tavis Ormandy, Google Security Team. Adobe just fixed AcroForm.api file ,but ImageConversion.api still have a vulnerability too.
When program load or insert a crafted TIFF image file,the stack of return-addr and SEH can be overflowed by bad fetching data operation.
Categories: Exploits
Thanks the author for article. The main thing do not forget about users, and continue in the same spirit.
[回應]