@MarkYason

Software Reverse Engineer and Vulnerability Researcher | Independent Security Researcher | https://xitter.cf/t.co/T8boZUUXJZ

markyason.github.io/
Joined June 2011
  • Tweets13
  • Following252
  • Followers600
We had a lot of fun handing out our first-ever #Vanguard Awards. If you couldn't be there, we've updated our blog with all the winners. Check it out at zerodayinitiative.com/blog/2…
1
2
14
3,718
In a new guest blog, @MarkYason talks about some of the #Adobe #Reader vulns he reported. Two of these bugs, in particular, CVE-2021-28632 and CVE-2021-39840, are related UAF bugs even though they were patched months apart. Read the details at zerodayinitiative.com/blog/2…

Zero Day Initiative — CVE-2021-28632 & CVE-2021-39840: Bypassing Locks in Adobe Reader

Over the past few months, Adobe has patched several remote code execution bugs in Adobe Acrobat and Reader that were reported by researcher Mark Vincent Yason ( @MarkYason ) through our program. Two...

zerodayinitiative.com
40
1
99
Finding an info leak is a key step to a successful exploit chain. @mrpowell details one such leak in #Adobe #Reader that can disclose the base address of Annots.api. Originally reported by @MarkYason, the details of this stellar bug (with video) are at bit.ly/3k1eWfS

Zero Day Initiative — ZDI-21-171: Getting Information Disclosure in Adobe Reader Through the ID Tag

Sometimes the only thing between you and a successful exploit is an information leak. While I see my fair share of information disclosure bugs on the job, it’s not every day that I see one that is so...

zerodayinitiative.com
1
25
2
70
The tag team of @abdhariri and @mrpowell blog about exploiting a slick UAF in #Adobe #Reader (CVE-2020-9715). The exploit was submitted to us by @MarkYason and patched last month. bit.ly/355EBi2

Zero Day Initiative — CVE-2020-9715: Exploiting a Use-After-Free in Adobe Reader

It’s a great feeling when you wake up in the morning to the smell of a fresh pour-over coffee and find a nice 0-day waiting for you in the queue. That’s my typical day-to-day morning at the ZDI. I...

zerodayinitiative.com
61
1
112
Mark Vincent Yason retweeted
Black Hat
@BlackHatEvents19 May 2015
.@MarkYason discusses the attack surface of Microsoft's new #Windows10 EdgeHTML rendering engine -- #BHUSA Briefing ow.ly/N9hZM
1
10
10
Mark Vincent Yason retweeted
IBM Security
@IBMSecurity8 Apr 2014
A Peek into IE 10’s Enhanced Protected Mode Sandbox - securityintelligence.com/int… via @ibmxforce #ibmxforce #IE10
7
5
Mark Vincent Yason retweeted
IBM Security
@IBMSecurity19 Mar 2014
Diving Into IE 10’s Enhanced Protected Mode Sandbox at #BHASIA 2014 - securityintelligence.com/ie-… // #IBMXForce
9
7
Mark Vincent Yason retweeted
IBM Security
@IBMSecurity23 Jan 2014
#Target Data Breach: Understand & Detect #Kaptoxa POS Malware - securityintelligence.com/tar… #malware #retail #pos #datasecurity #ibmxforce
17
2
Load more