Al parecer esto fue encontrado en un exploit que se estaba masificando o sea que alguien lo descubrió y lo utilizaba para infectar otras computadoras y adobe lo encontró
http://vil.mcafeesecurity.com/vil/content/v_238179.htmOverview -
Exploit-PDF.w exploits a vulnerability in Adobe Reader and Acrobat 9.1.3 and earlier (CVE-2009-3459), allows remote attackers to execute arbitrary code via a crafted PDF document and possibly drops an embedded exe file.
Characteristics -
This detection is for a trojan which exploits a vulnerability in Adobe Reader and Acrobat 9.1.3 and earlier.
When the exploit is successful, the malicious pdf file drops and executes a malware executable.
The dropped executables are different in different Exploit-PDF.w files. The recent sample drops the following files:
* %USERPROFILE%\local settings\temp\[random number].tmp (BackDoor-EFQ)
* %USERPROFILE%\local settings\temp\The question of the charter of pro-democracy moment.pdf
* %SYSTEM32%\workstation.dl (BackDoor-AWQ.b)
Asi que si buscamos en google "The question of the charter of pro-democracy moment.pdf" tendremos el exploit a la mano xD
Autor
En línea
