main
Report a problem

Adobe issues critical fix

Daniel Fleshbourne   on 25 June 2008 - 10:06 · 8 comments & 5456 views

Advertisement (Why?)
Adobe has issued fixes for a critical vulnerability being exploited by malware writers. The flaw affects both Adobe's Acrobat and Adobe Reader applications on MacOS and Windows. The company recommends that users of both platforms install the security update.

The vulnerability could allow an attacker to gain control of the user's system by way of malformed javascript code. When exploited, the vulnerability leads to an application crash which leaves the user liable to remote control of their system and code execution from the attacker. Such remote code execution flaws are a favorite method for covertly installing malware and are often regarded as the highest risks amongst software vulnerabilities.

View: The full story @ vnunet

Post a comment · Send to friend Comments · There are 8 additional comments
#1 Volatile on 25 Jun 2008 - 11:26
Well isn't that nice..
#2 +warwagon on 25 Jun 2008 - 15:34
Isn't this a once a week flaw sort of thing. Seems like every week i'm hearing about a new acrobat flaw.

Would it be safer to use something like foxit reader?
#3 Xire on 25 Jun 2008 - 16:07
Start Adobe Reader
Then Help/About Adobe Reader...
Then click Credits <-- this is the real cause. Whenever somebody from this list leaves Adobe, they need to issue patch with changed list
(1 reply) #4 excalpius on 25 Jun 2008 - 17:04
Heaven forbid either the article or this Neowin regurgitation actually LINK to Adobe in any way, shape, or form. I know it's easy for US to find, but what about the noobs? Is the extra 2 seconds actually that precious to you?

http://www.adobe.com/products/acrobat/readstep2.html
#4.1 +warwagon on 25 Jun 2008 - 17:28
True but if you already had it, you could just click update inside the actual program. Or as I remember from acrobat adobe is pretty good at forcing updates down your throat anyway.

And if you didn't already have it then it wouldn't effect you anyway.
#5 carstereos on 25 Jun 2008 - 20:47
It was damn hard to track this down, but here is the link http://www.adobe.com/support/security/bull.../apsb08-15.html
#6 cyberdrone2000 on 26 Jun 2008 - 04:57
I've never seen anyone with Adobe Reader on Mac OS. I think it has to do with the OS's native support for viewing and creating PDF content. I could understand Acrobat, though... the last time I used it, it had some decent features. Bit slow on the loading times...
#7 [deXter] on 14 Jul 2008 - 03:14
One of the reasons why I disable JavaScript in Adobe Reader. Just why would one need JS support in a PDF file simply beats me.. :/

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)