PDF.Exploit takes advantage of vulnerability in Adobe Acrobat and Adobe Reader 8.1. This could allow remote code execution as explained in the Adobe website CVE-2007-5020. All computers running Windows XP or Windows 2003 operating systems with Internet Explorer 7 are vulnerable to this exploit.

An exploit code arrives as a malicious PDF file in an attachment from a spammed email sent by another malware or malicious user. If the attacker successfully exploits this vulnerability then this could connects to FTP site ftp://{BLOCKED}.{BLOCKED}.146.130/ldr.exe to download and execute a malicious file. It also disable Windows built-in Firewall by executing a netsh command.

 Patching PDF.Exploit Vulnerability:

Adobe has released a update for this vulnerability. It can be downloaded from:

http://www.adobe.com/support/security/bulletins/apsb07-18.html

Users are advised to download and apply this update to remove the vulnerability inherent in the system.

This exploit was discovered on October 30, 2007.

Click here to download a 30 day Evaluation Copy of
Protector Plus anti virus for your operating system