Vulnerabilitymedium
Matt's Primer for PDF Analysis
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-4324 | Use-After-Free RCE in Adobe Acrobat and Reader via Crafted PDF Files | — | 82% | KEV | — KEV |
From the original article
5 min read at blog.talosintelligence.com
For obvious reasons, the VRT has been spending a lot of time on the PDF format lately. While the attack researchers have been concentrating on fuzzing, reverse engineering and data flow analysis, the defense researchers have been automating the backend analysis of PDF submissions. As part of this effort, we've had to do a very deep dive on the PDF format.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.