https://insinuator.net/tags/pdf/ Recent content in PDF on Insinuator.net - Bold Statements Hugo en-us Mon, 10 Feb 2014 00:00:00 +0000 https://insinuator.net/2014/02/analyzing-a-cve-2013-3346/cve-2013-5065-exploit-with-peepdf/ Mon, 10 Feb 2014 00:00:00 +0000 https://insinuator.net/2014/02/analyzing-a-cve-2013-3346/cve-2013-5065-exploit-with-peepdf/ <p>This is a guest post from Jose Miguel Esparza (<a href="https://twitter.com/EternalTodo">@EternalTodo</a>)</p> <p> </p> <p>There are already some good blog posts talking about this exploit, but I think this is a really good example to show how <a href="http://peepdf.eternal-todo.com/"><em>peepdf</em></a> works and what you can learn if you attend the workshop <a href="https://www.troopers.de/troopers14/troopers14-1-day-workshop-squeezing-exploit-kits-and-pdf-exploits/index.html"><em>“Squeezing Exploit Kits and PDF Exploits”</em></a> at <a href="https://www.troopers.de/troopers14/index.html">Troopers14</a>.  The mentioned exploit was using the <a href="http://www.zerodayinitiative.com/advisories/ZDI-13-212/">Adobe Reader ToolButton Use-After-Free</a> vulnerability to execute code in the victim’s machine and then the <a href="http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5065">Windows privilege escalation 0day</a> to bypass the <a href="http://cansecwest.com/slides/2013/Adobe%20Sandbox.pdf">Adobe sandbox</a> and execute a new payload without restrictions.</p>