In a previous blog post I warned that we should be increasingly cautious with PDFs because more and more PDF-related flaws are being released. Security experts at RSA 2007 echoed last week that corporate threats seem to be “moving to Adobe”.

Today is Microsoft’s February Patch Tuesday. Microsoft issued six critical-rated and six important-rated patches. And one of the critical flaws being addressed by those patches – you guessed it – relates to PDFs. The MS07-010 bulletin states that a specially crafted PDF file could trigger an integer overflow in the Microsoft Malware Protection Engine. This would allow remote code execution; in one attack vector, no user interaction is required for exploitation. More information about this flaw can be found on the McAfee Threat Center site.

Do we have another PDF-flaw trend fitter or what?