Hacker tips CERT's hand on Linux/PDF flaw

Confidential vulnerability information managed by the CERT Coordination Center has again been leaked to the public, following a flurry of such leaks in March.

The latest information concerns a flaw in PDF (Portable Document Format) readers for Unix and could allow a remote attacker to trick users into executing malicious code on their machines, according to a copy of the leaked vulnerability report.

As with confidential CERT information that was leaked in March, the latest report was posted to a vulnerability discussion list by an individual using the name "hack4life."

The leaked information was taken from communication sent from CERT to software vendors affected by the PDF problem, according to Jeffrey Carpenter, manager of the CERT Coordination Center. The information appears to be from a vulnerability report submitted to CERT by a Cincinnati security researcher by the name of Martyn Gilmore.

News source: InfoWorld

Report a problem with article
Next Article

Apple to introduce new Mac OS X Server at WWDC

Previous Article

West Virginia drops Microsoft appeal

Join the conversation!

Login or Sign Up to read and post a comment.

-1 Comments - Add comment

Advertisement