Signature Detail

HTTP: Adobe Reader PDF Evasive File Format

This signature detects attempts to bypass security devices using the obfuscated value of names and strings in a PDF document. Attackers can bypass security devices by using this method.

References

• URL: http://www.adobe.com/devnet/pdf/pdf_reference.html
• URL: http://blog.9bplus.com/av-bypass-for-malicious-pdfs-using-xdp