Author Topic: PDF:CVE-2007-3896 [Expl]  (Read 3175 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
PDF:CVE-2007-3896 [Expl]
« on: March 24, 2016, 05:43:37 PM »
Have a PDF that only Avast is alerting has infection PDF:CVE-2007-3896 [Expl]

Any Ideas??

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: PDF:CVE-2007-3896 [Expl]
« Reply #1 on: March 24, 2016, 05:52:06 PM »
Submit the file to VirusTotal and post the link here.


Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: PDF:CVE-2007-3896 [Expl]
« Reply #3 on: March 29, 2016, 01:55:43 PM »
Does the pdf contain a link to a website ?
It can be that avast is detecting the link and that the site has a problem.

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2294
Re: PDF:CVE-2007-3896 [Expl]
« Reply #4 on: March 30, 2016, 11:11:22 AM »
Hello,
find "mailto:" URI (containing "%" sequence) in PDF: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-3896 and remove it.

Milos