Adobe adds security features to Acrobat and Reader
Wednesday, October 14, 2009
Adobe Systems on Tuesday released new versions of Reader and Acrobat to fix security vulnerabilities in the popular PDF software. Acrobat and Reader 9.2 and 8.1.7 are shipped with a beta updater for more streamlined updating.
The new updater ships in a "passive state," but Adobe said it plans to activate it for end users invited into the beta program, "which will allow us to test a variety of network configurations encountered on the internet in order to ensure a robust update experience."
Adobe Reader and Acrobat 9.2 and 8.1.7 updates also include security features to alert end users who have Javascript disabled in the product. When Javascript is disabled, the gold bar at the top of the document will alert users to options for enabling Javascript for that document.
Javascript is frequently exploited by cyberattackers for distribution of malware, which is why Adobe is also introducing a Javascript Blacklist Framework, to protect customers against attacks that target a specific Javascript API call.
Adobe came under criticism earlier this year for its slow response to reported security vulnerabilities in its products, prompting the company to change its updating procedures. Adobe now issues quarterly security patches times to coincide with Microsoft's monthly patch releases.

Related News:
Nearly 3,000 smartcard phones infected - 3.19.2010 Nearly 3,000 memory cards in HTC Magic smartphones released by Vodafone were infected by malware before purchase, Vodafone Spain reported on Friday. The initial scare came last week when a researcher for Panda Security discovered the breach on her newly purhcased phone.
Google removes malware-spreading site from searches - 3.19.2010 Google announced on Friday that DealsDirect, Australia's largest discount estore, was temporarily blocked from direct access by users after the search engine detected malware on the site.
Facebook bigger threat to web security than Twitter - 3.19.2010 The amount of information available on a person's Facebook profile page makes the popular social networking site more dangerous than other popular competitors such as Twitter, according to AVG Technologies.
Web security professionals skeptical of national broadband - 3.18.2010 Leading web security experts believe that the recently released National Broadband Program is potentially a major risk to national web security. As more people move from dial-up and other slower forms of internet access, they will be exposed to malware and be unable to handle it.
Authorities call for increased URL regulation - 3.18.2010 In an effort to attack malware at the root of the problem, the Federal Bureau of Investigation and the UK's Serious Organised Crime Agency submitted a new list of recommendations to the Internet Corporation for Assigned Names and Numbers that would make it more difficult to register a domain on the web, according to IT World Canada.
|