plc.myforum.ro

graico · Member Joined: 17 Jun 2009 Posts: 166

It's September 2017, and .NET lets PDFs hijack your Windows PC
Look Microsoft Redmond's September patch dump addresses a global of 81 CVE-listed vulnerabilities, 39 of which would allow for remote code execution.
Four of the flaws are already publicly known and one has been actively exploited.

The targeted bug is CVE-2017-8759, a vulnerability in .NET framework's handling of input data.
Dustin Childs of Trend Micro's Zero Day Initiative notes the vulnerability is most likely to be targeted through PDF files or other malicious document attachments.
https://portal.msrc.microsoft.com/en-US/security-guidance
Read all on:
https://www.zerodayinitiative.com/blog/2017/9/12/the-september-2017-security-update-review