Adobe exploit puts backdoor on computers
Published: 12 Oct 2009 10:35 BST
A new zero-day exploit targeting Adobe Reader, as well as 9.1.3 and earlier versions of Adobe's Acrobat, puts a backdoor onto computers using JavaScript, Trend Micro researchers warned on Friday.
Trend Micro identified the exploit as a Trojan horse dubbed 'Troj_Pidief.Uo' in a blog post. It arrives as a PDF file containing JavaScript-based malware, 'Js_Agent.Dt', and then drops a backdoor called 'Bkdr_Protux.Bd'.
The exploit affects Microsoft Windows 98, ME, NT, 2000, XP and Server 2003, according to Trend Micro.
The blog post provides technical details on how the malware works, specifically the activity of its shell code, the piece of code that delivers the payload. The JavaScript is used to execute arbitrary codes in a technique known as 'heap spraying'.
To learn more, see Adobe exploit puts backdoor on computers on CNET News.













