News for hackers. Stuff that matters.

A comment on A fake job offer took down Axie Infinity. Parent comment

Re:A fake job offer took down Axie Infinity by ineptech on Wednesday July 06, 2022 @12:37PM (#32003400)
> I wish there were more information about what the vulnerability was in the PDF in the first place.

Agreed, I thought that opening a read-only PDF was GRAS regardless of the application.

[ Parent | on HN ]
Re:A fake job offer took down Axie Infinity by WorldMaker on Wednesday July 06, 2022 @02:39PM (#32005047)
PostScript is a Turing Complete language (always has been), and an over-simplified description of PDF is that it "just" wraps PostScript in a single Virtual Machine to target (versus PostScript has a lot of subtly different physical machines it was built for/targeted).

That "PDF VM" has had many 0-day RCE bugs over the years. Thankfully though the VM is standardized with the format it does have multiple implementations still in different applications and many exploits are application-specific implementation bugs.

[ Parent | on HN ]