Flame: Massive cyber-attack discovered, researchers say

Re:Flame: Massive cyber-attack discovered, researchers say by FreakLegion on Monday May 28, 2012 @04:39PM (#4034855)

Note that while the exploit is in the PDF, the vulnerability is in the PDF reader. In practice, Adobe's software is the only attack surface anyone ever exploits, so you can read exploit-laden PDFs worry-free by using a less popular alternative. The same is true with Word/Excel files, etc.

You should still have some kind of comprehensive security solution in place, particularly for a business environment, but use of non-standard software is an effective fail-safe for when your "real" security craps out on you (as it inevitably will).

[ Parent | on HN ]

Re:Flame: Massive cyber-attack discovered, researchers say by makomk on Tuesday May 29, 2012 @03:58PM (#4039433)

I've no idea why everyone only exploits Adobe's software though. For instance, pretty much all the open source PDF readers are based on a single PDF library called Poppler with a history of security vulnerabilities - exploit that and you should be able exploit all of them in one fell swoop.

[ Parent | on HN ]