Mar 18 CVE-2009-4324 PDF Report on 2010 NPC Mar 18, 2010 8:53 AM

• CVE-2009-4324 Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to execute arbitrary code via a crafted PDF file using ZLib compressed streams, as exploited in the wild in December 2009.

 Download ebec610267f0407a53021df441d1fd54 NPC Report.pdf as a password protected archive (please contact me if you need the password)

• Details ebec610267f0407a53021df441d1fd54 NPC Report.pdf

From: Ted Dean [mailto:ustrades2010@gmail.com]
Sent: Thursday, March 18, 2010 8:53 AM
To: XXXXXXX
Subject: Report on 2010 NPC

Colleagues,

As you know, the National People’s Congress (NPC) is meeting in its annual plenary session in Beijing March 5 to 14, 2010. This year’s meeting, in addition to occurring on the heels of economic recession internationally, is also important as it marks the beginning of work on the new five year plan, China’s twelfth, which will take effect in 2011. This year ’s plenary session reviewed the Chinese government ’s work last year and discussed China’s social and economic priorities this year. This attached report highlights major policy discussion points expressed during the ten-day long meeting, looks at possible policy changes following the meeting as well as impacts on multinational companies, and includes recommendations for leveraging government priorities for business development.

I hope you find it interesting.

Best,

Ted

--
Ted Dean
Vice Chair- Board of Directors
AmCham-China

----------

Virustotal
http://www.virustotal.com/analisis/0d5d28212d31cd3871d17496420b3f2ac96856337b36bbf4412ebb77cec4751f-1269257719

 File NPC_report.pdf received on 2010.03.22 11:35:19 (UTC)
Result: 10/42 (23.81%)
AhnLab-V3    5.0.0.2    2010.03.22    PDF/Exploit
Avast    4.8.1351.0    2010.03.21    JS:Pdfka-WP
Avast5    5.0.332.0    2010.03.21    JS:Pdfka-WP
BitDefender    7.2    2010.03.22    Exploit.PDF-JS.Gen
F-Secure    9.0.15370.0    2010.03.22    Exploit.PDF-JS.Gen
Kaspersky    7.0.0.125    2010.03.22    Exploit.JS.Pdfka.bvz
Microsoft    1.5605    2010.03.22    Exploit:Win32/Pdfjsc.CW
NOD32    4964    2010.03.22    JS/Exploit.Pdfka.NPK
nProtect    2009.1.8.0    2010.03.22    Exploit.PDF-JS.Gen
Additional information
File size: 235475 bytes
MD5...: ebec610267f0407a53021df441d1fd54

Wepawet
http://wepawet.cs.ucsb.edu/view.php?hash=ebec610267f0407a53021df441d1fd54&type=js
Jsand 1.02.02    malicious  
doc.media.newPlayer    Use-after-free vulnerability in the Doc.media.newPlayer method in Adobe Reader and Acrobat 8.0 through 9.2    CVE-2009-4324