



This is not meant to call Adobe’s PDF out as a unique problem. That also has long been a ripe territory for exploitable software flaws. Support for embedding binary elements, and the architecture that PDF code is executed in order to render a pageįor viewing, all combines to build the foundation for a powerful piece of software (no doubt aiding in its adoption) Of binary data within an otherwise-ASCII encoded document. The specification contains manyĮlements which are similar to programming languages, while other features (like flow control) are absent.Īdditionally, though PDF itself is an ASCII-based syntax, it has features built into it that allow for embedding PDF documents offer an interesting case study in exploits, as the underlyingįile structure is built from a markup language that was derived from the PDF documents have long been one of the oldest and most prolific attack vectors for user-targeted exploits.Īt one time it was a broader targeting vector than Microsoft Office, due to the premium cost of Office which 5 April 2020 PDF Document Structure & Analysis
