Discover Hacks/Cracks News
Wormy attack could spread via PDF
"When I saw Didier's hack, it was the first time I could do it from completely inside the PDF," Conway said.
Hackers have known for some time that PDF readers could be manipulated in this way, but Stevens' attack showed how one reader -- Foxit Reader -- could launch the executable without even notifying the user. Foxit has now patched this bug, but the underlying flaw in the PDF standard can't be fixed without changing the PDF standard itself.