Home / malware

PDF

Exploit:W32/PDFExploit.G

First posted on 10 March 2010.
Source: SecurityHome

Aliases :

Exploit:W32/PDFExploit.G is also known as Exploit:Win32/Pidief.AX, TrojanDownloader:Win32/Qaantiz.A (M.

Explanation :

A program or technique that takes advantage of a vulnerability to remotely access or attack a program, computer or server.

Additional DetailsExploit:W32/PDFExploit.G is distributed in a maliciously-crafted PDF file and exploits a vulnerability (CVE-2010-0188) in Adobe Reader program to open a connection to a remote website.

For more information about the vulnerability, please see:

€ http://www.adobe.com/support/security/bulletins/apsb10-07.html (external site)


Execution

When the malicious PDF file is executed, a downloader is dropped on the computer and attempts to open a connection to:

€ tiantian.ninth.biz

Last update 10 March 2010

 

TOP