CVE-2009-0927, P.O.C.?

  • Thread starter Thread starter Catter
  • Start date Start date
You think anyone would be foolish enough to click on the link you posted?

:I just accidentally run pdf file CVE-2009-0927.pdf, from CVE-2009-0927
pack,
: when antivirus was disabled.
: Although this pack marked as exploit and technical report note, I'm not
: sure, can it contain link to real malware or virus when exploit executed?
: pdf size is124KB
:
:
 
Tom Willett said:
You think anyone would be foolish enough to click on the link you posted?

:I just accidentally run pdf file CVE-2009-0927.pdf, from CVE-2009-0927
pack,
: when antivirus was disabled.
: Although this pack marked as exploit and technical report note, I'm not
: sure, can it contain link to real malware or virus when exploit
executed?
: pdf size is124KB
:
:
Click to expand...
 
: ---------------
: if you afraid click on link, how do you use Internet at all?

You really don't get it, do you? No wonder you get malware.
:
 
Michael said:
You posted a link to a file that may be a virus. You do the math, moron!
Click to expand...

No, he posted a link to a file that _contained_ a virus (or some type of
malware). Or at least that's how Avast! saw it. Since it was a .zip
file, I thought I'd click it, and just not unzip the file.. Avast!
caught it before the "page" loaded.
 
Elmo said:
No, he posted a link to a file that _contained_ a virus (or some type of
malware). Or at least that's how Avast! saw it. Since it was a .zip
file, I thought I'd click it, and just not unzip the file.. Avast!
caught it before the "page" loaded.
Click to expand...

....and your point is?
 
Elmo said:
No, he posted a link to a file that _contained_ a virus (or some type of
malware). Or at least that's how Avast! saw it. Since it was a .zip
file, I thought I'd click it, and just not unzip the file.. Avast!
caught it before the "page" loaded.
Click to expand...


"In all the excitement I can't remember, did I shoot five, or six? You've
got one question to ask yourself, do you feel lucky, punk? Well, ...
 
T said:
"In all the excitement I can't remember, did I shoot five, or six? You've
got one question to ask yourself, do you feel lucky, punk? Well, ...
Click to expand...

Agreed, that was pretty risky.. I won't do that again. I noticed that
after I clicked the link, my download folder had an empty .zip file PLUS
an external file. I just didn't see how a .zip file could be dangerous
unless files were actually extracted and executed, but I seem to
remember reading in a Trend Micro newsletter about a couple of new
exploits, and I suspect this was one of them.
 
Back
Top