"Fatboy?"

J.

-----Original Message-----
From: Joey Mengele [mailto:joey.mengele@hushmail.com]=20
Sent: Thursday, September 20, 2007 3:34 PM
To: pdp.gnucitizen@googlemail.com; ge@linuxbox.org
Cc: full-disclosure@lists.grok.org.uk; bugtraq@securityfocus.com
Subject: Re: [Full-disclosure] 0day: PDF pwns Windows

Dear Fatboy,

Let's put aside for a minute the fact that you have no idea what=20
you are talking about and let's also, for the benefit of this very=20
valuable debate, assume your definition is correct. First, please=20
prove this bug was never used in the wild. After that, please prove=20
your credibility in the realm of defining words related to illegal=20
computer hacking. Thanks.

J

P.S. Talking about botnets doesn't count to satisfy part 1 OR part 2

___
"If today I stand here as a revolutionary, it is as a revolutionary=20
against the Revolution."=20


On Thu, 20 Sep 2007 11:29:22 -0400 Gadi Evron <ge@linuxbox.org>=20
wrote:
>Impressive vulnerability, new. Not a 0day.
>
>Not to start an argument again, but fact is, people stop calling=20
>everything a 0day unless it is, say WMF, ANI, etc. exploited in=20
>the wild=20
>without being known.
>
>I don't like the mis-use of this buzzword.
>
> Gadi.
>
>
>On Thu, 20 Sep 2007, pdp (architect) wrote:
>
>> http://www.gnucitizen.org/blog/0day-pdf-pwns-windows
>>
>> I am closing the season with the following HIGH Risk=20
>vulnerability:
>> Adobe Acrobat/Reader PDF documents can be used to compromise=20
>your
>> Windows box. Completely!!! Invisibly and unwillingly!!! All it=20
>takes
>> is to open a PDF document or stumble across a page which embeds=20
>one.
>>
>> The issue is quite critical given the fact that PDF documents=20
>are in
>> the core of today's modern business. This and the fact that it=20
>may
>> take a while for Adobe to fix their closed source product, are=20
>the
>> reasons why I am not going to publish any POCs. You have to take=20
>my
>> word for it. The POCs will be released when an update is=20
>available.
>>
>> Adobe's representatives can contact me from the usual place. My=20
>advise
>> for you is not to open any PDF files (locally or remotely).=20
>Other PDF
>> viewers might be vulnerable too. The issues was verified on=20
>Windows XP
>> SP2 with the latest Adobe Reader 8.1, although previous versions=20
>and
>> other setups are also affected.
>>
>> A formal summary and conclusion of the GNUCITIZEN bug hunt to be=20
>expected soon.
>>
>> cheers
>>
>> --=20
>> pdp (architect) | petko d. petkov
>> http://www.gnucitizen.org
>>
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>Hosted and sponsored by Secunia - http://secunia.com/

--
Click for free info on earning your associates degrees.
http://tagline.hushmail.com/fc/Ioyw6...KYwGE2mXyuQX1w
CzAkHpnY9xTtK/