{"id":3606,"date":"2013-10-28T23:03:25","date_gmt":"2013-10-28T15:03:25","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3606"},"modified":"2015-09-09T19:36:53","modified_gmt":"2015-09-09T11:36:53","slug":"major-adobe-hack-acrobat-coldfusion-source-code-leaked","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2013\/10\/major-adobe-hack-acrobat-coldfusion-source-code-leaked\/","title":{"rendered":"Major Adobe Hack – Acrobat & ColdFusion Source Code Leaked"},"content":{"rendered":"

So earlier this month there was a major Adobe hack and the source code for a couple of it’s mainstream products (Acrobat Reader<\/a>, ColdFusion and ColdFusion Builder) was leaked and downloaded, most likely in it’s entirety.<\/p>\n

There was a bit of a panic surrounding this as the software is used by a lot of major governmental agencies (especially in the US), and it’s feared that when someone with malicious intent has access to your source code – they are more likely to be able to find previously undiscovered vulnerabilities.<\/p>\n

The attack also leaked 2.9 million customer records including names and credit card numbers, so much for Adobe doing cloud right.<\/p>\n

Adobe’s systems have been hit by numerous “sophisticated attacks” that have compromised the information of 2.9 million customers, and accessed the source code of Adobe products.<\/p>\n

The company said on Thursday that it has been the victim of a major cyberattack and said hackers had accessed those millions of customer IDs and encrypted passwords.<\/p>\n

“We also believe the attackers removed from our systems certain information relating to 2.9 million Adobe customers, including customer names, encrypted credit or debit card numbers, expiration dates, and other information relating to customer orders,” the company said.<\/p>\n

It does not believe decrypted credit or debit card numbers were accessed.<\/p>\n

“As a precaution, we are resetting relevant customer passwords to help prevent unauthorized access to Adobe ID accounts. If your user ID and password were involved, you will receive an email notification from us with information on how to change your password,” the company wrote.<\/p>\n

The company says people should change their passwords on any other website where they have used the same user ID and password. But you’d do that anyway, wouldn’t you?<\/p><\/blockquote>\n

Now whilst that studying the source code may give you some advantages, Acrobat for example has over 13 million lines of code – so you’d basically looking for a needle in a haystack.<\/p>\n

Also the fact the software has a bunch of security measures built in like address space layout randomization (ASLR<\/a>), a sandbox (which logically separates any opened PDF file), and the broker process (basically a firewall between the process and system calls) – means even if you do find a vulnerabilty, crafting an exploit from it is going to be really hard.<\/p>\n

We haven’t as yet seen any zero day exploits that could have come from the compromise, but it doesn’t mean they aren’t out there – or being used for targeted attacks\/cyberterrorism.<\/p>\n