Malicious JavaScript targets 3 Old Vulnerabilities

The report demonstrates a PDF exploitation technique where attackers split malicious JavaScript across objects and encode each part with different filters (ASCIIHexDecode and ASCII85Decode) to evade AV detection; the decoded payload targets three legacy PDF vulnerabilities (CVE-2007-5659, CVE-2008-2992, CVE-2009-0927), a live sample is shown with low antivirus detection rates, and the author recommends defense-in-depth measures.