Hacker exposes Linux/PDF flaw
Hereby an interseting paper about a *nix vuln with acrobat reader.
It seems there is no workaround yet.
Pay attention when reading PDF and using PDF inside hyperlink....
Quote:
Full article here
In the report, Gilmore described a problem in the way that PDF viewing programs for the Unix platform process hyperlinks within valid PDF documents.
When processing hyperlinks, common PDF readers use the Unix "shell" command to launch and pass commands to external programs. For example, clicking on a hyperlink for a web page would launch the associated web browser, according to the report.
However, Gilmore found that such programs do not properly check the syntax of such commands, enabling arbitrary shell commands to be executed on the vulnerable machine.
While attackers are limited by the privilege level of the user clicking the malicious link, the vulnerability could enable a remote attacker to use shell commands to delete files from the user's hard drive or perform other actions without the knowledge of the victim, the report said.
