This section lists the latest news and blogs found via the daylife API (and for older items, the technorati API), which mention or otherwise discuss this vulnerability.
from: F-Secure Antivirus Research Weblog
Now here's an interesting turn of events.
In the middle of all the attention to the "Operation Aurora" attacks, we're now seeing new targeted attacks that are using this very event as the lure to get the targets to open a malicious
from: F-Secure Antivirus Research Weblog
... Now we saw one against the intelligence sector. This attack was done with a PDF file. Again. It was targetting the CVE-2009-4324 vulnerability. Again. When opened, the PDF file (md5: c3079303562d4672d6c3810f91235d9b) looked like this: What really happens...
from: F-Secure Antivirus Research Weblog
...talks about a real conference to be held in Las Vegas in March. When opened to Adobe Reader, the file exploited the CVE-2009-4324 vulnerability. This is the doc.media.newPlayer vulnerability that Adobe patched last Tuesday. The exploit dropped a file called...
from: PR-Inside.com
...as it comes with DEP (data execution prevention) enabled by default. Adobe Reader Threat Details: Officially known as CVE-2009-4324, the vulnerability affects Adobe Reader and Acrobat 9.2 and earlier versions. Successful exploitation could cause crashes and...
from: ZDNet
...vulnerabilities. This update resolves a use-after-free vulnerability in Multimedia.api that could lead to code execution (CVE-2009-4324). This issue is being actively exploited in the wild; the exploit targets Adobe Reader and Acrobat 9.2 on Windows platforms. This...
from: The Register
...same day Microsoft is slated to release its next installment of security fixes. The vulnerability, which is classified as CVE-2009-4324, has been under targeted attack for more than three weeks. White hat hackers have also added an exploit to the Metasploit...
from: Freshnews.com
...and uncovered 157 new vulnerabilities in total. On top of this, hackers continued to find ways to exploit zero-day attacks: CVE-2009-4324 was one observed through Adobe Reader/Acrobat and Javascript -- an increasingly common attack vector. Another zero-day...
from: SC Magazine
...Adobe received reports of a vulnerability in Adobe Reader and Acrobat 9.2 and earlier versions being exploited in the wild (CVE-2009-4324). We are currently investigating this issue and assessing the risk to our customers. We will provide an update as soon...
