Apr 16 CVE-2010-0188 PDF China-Taiwan relations from m.akiyama@hotmail.co.jp

• CVE-2010-0188 Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors

Download  75d92097d4ae109aa5d199aa97e08569 ATT70608.pdf  as a password protected archive (please contact me for the password if you need it)

Details 75d92097d4ae109aa5d199aa97e08569 ATT70608.pd

From: 秋山 昌廣 [mailto:m.akiyama@hotmail.co.jp]
Sent: Thursday, April 15, 2010 11:23 PM
To: XXXXXXXXX
Subject: 米中台関係総論

From: Akiyama Masahiro [mailto: m.akiyama @ hotmail.co.jp]
Sent: Thursday, April 15, 2010 11:23 PM
To: XXXXX
Subject:  China-Taiwan relations

Virustotal

http://www.virustotal.com/analisis/4c63aaf19effe49b2d38597150b61c42fbc9c0be883584744dae63295ec1211d-1271648028

 File ATT70608.pdf received on 2010.04.19 03:33:48 (UTC)
Result: 1/40 (2.5%)
Sophos    4.52.0    2010.04.19    Troj/PDFJs-JI  -  Looks like Sophos is doing something right (M)
Additional information
File size: 926302 bytes
MD5...: 75d92097d4ae109aa5d199aa97e08569

Headers

Received: from KAW101-W51 ([207.46.66.7]) by kaw0-omc1-s2.kaw0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
     Thu, 15 Apr 2010 20:23:23 -0700
Message-ID:
Return-Path: m.akiyama@hotmail.co.jp
Content-Type: multipart/mixed;
    boundary="_35bb685f-4c13-4d18-a92f-03fd7aaca2a0_"
X-Originating-IP: [211.47.68.171]
From: =?iso-2022-jp?B?GyRCPSk7MxsoQiAbJEI+O1ciGyhC?=
To: XXXXXXXXXXXXX
Subject: =?iso-2022-jp?B?GyRCSkZDZkJmNFg3OEFtT0AbKEI=?=
Date: Fri, 16 Apr 2010 12:23:22 +0900
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 16 Apr 2010 03:23:23.0414 (UTC) 

       Hostname:    211.47.68.171
      ISP:    KRNIC
      Organization:    Today and Tomorrow
      Country:    Korea, Republic of
      State/Region:    Soul-t'ukpyolsi
      City:    Seoul

http://www.robtex.com/ip/211.47.68.171.html#whois
IPv4 Address : 211.47.68.160-211.47.68.191
Network Name : TTNET-INFRA
Connect ISP Name : TTNet
Connect Date : 20020420
Registration Date : 20031021
Publishes : Y

Organization ID : ORG93002
Org Name : Today and Tomorrow
Address : Seoul Guro-gu Guro-dong
Detail Address : 13F, Kolon Digital Tower, 222-7
Zip Code : 152-050

Name : IP Manager
Org Name : Today and Tomorrow
Address : Seoul Guro-gu Guro-dong
Detail Address : 13F, Kolon Digital Tower, 222-7
Zip Code : 152-050
Phone : +82-2-2101-0114
E-Mail : ip@tt.co.kr

Name : IP Administrator
Phone : +82-2-2101-0000
E-Mail : mgr@tt.co.kr

Name : IP Manager
Phone : +82-2-2101-0114
E-Mail : ip@tt.co.kr

Name : IP Manager
Phone : +82-2-2101-0114
E-Mail : ip@tt.co.kr

 The file appears to contain libtiff exploits for Adobe 9.x.x and separate for other versions.   Base64 encoded.