It looks like you're using an Ad Blocker.

Please white-list or disable AboveTopSecret.com in your ad-blocking tool.

Thank you.

 

Some features of ATS will be disabled while you continue to use an ad-blocker.

 

Critical Zero-day Vulnerability in Adobe Reader - lockheed Martin was/is infected

page: 1
3

log in

join
share:

posted on Dec, 8 2011 @ 06:52 AM
link   
thehackernews.com...

Lockheed Martin was/is infected^^


Researchers at the Lockheed Martin Computer Incident Response Team (CRT) and members of the Defense Security Information Exchange informed Adobe that their products were being exploited by hackers.

The exploit affects all versions of Adobe Reader and Adobe Acrobat 9.x and higher, including Adobe Reader X and Adobe Acrobat X (10.1.1) for Windows, Macintosh, and UNIX.

“This U3D memory corruption vulnerability (CVE-2011-2462) could cause a crash and potentially allow an attacker to take control of the affected system,” wrote Adobe in their incident report, explaining that this essentially a memory-corruption and privilege escalation exploit. “There are reports that the vulnerability is being actively exploited in the wild in limited, targeted attacks against Adobe Reader 9.x on Windows. Adobe Reader X Protected Mode and Acrobat X Protected View mitigations would prevent an exploit of this kind from executing.”

According to a blog post on the subject, Adobe has published that they are currently engineering a fix for the issue and expect to make it available for Windows version Adobe Reader 9.x and Acrobat 9.x no lager than December 12, 2011. Adobe Acrobat and Reader X have much more sufficient protected mode capabilities so Adobe believes that it is hardened enough to avoid the exploit, so a fix to that will not be coming until January 10, 2012.

Macintosh and UNIX will wait as they’re much more difficult to exploit. However, the exploit has already been seen active in the wild and it is expected that it’s being used by criminal and espionage organizations to attempt to infiltrate defense corporations and others.


hope anon-antisec was it and not china/iran/russia - anyway...reason why i post this is to inform all of you:

be carefull with adobe - pdf is NOT safe...
edit on 8-12-2011 by Hessdalen because: mindcontrol

edit on 8-12-2011 by Hessdalen because: mindcontrol




posted on Dec, 8 2011 @ 07:12 AM
link   
Always makes me wonder why governmental/military institutions don't have a specialized OS just for them. It would make things a lot safer.



posted on Dec, 8 2011 @ 07:21 AM
link   
reply to post by Hessdalen
 


Explanation: S&F!

Sounds like the mass book burning on knowledge has begun on the interwebs in force now!


Personal Disclosure: We are at total war remember!
The enemy uses incendiaries!


Scorched Earth Policy!


P.S. It would be more simple to just explosively cut the submarine communication cables and send a whole lota shrapnel into low earth orbit to deal with the majority of communication satellites!

edit on 8-12-2011 by OmegaLogos because: Edited for clarity.



 
3

log in

join