Adobe promises Reader, Acrobat patches for Tuesday
Thursday, May 7, 2009
Adobe last week promised to patch the zero-day vulnerability in its Adobe Reader and Acrobat software no later than Tuesday, acknowledging the security bugs in a post on the Adobe product security response blog.
On Friday, Adobe's security team said it would issue updates to Adobe Reader and Acrobat versions 7, 8 and 9 for Windows and versions 8 and 9 for Mac and Linux.
"We are in the process of fixing the issue," which said David Lenoe, the company's security program manager, in a blog post. "Additionally, we have confirmed the second vulnerability (CVE-2009-1493) for Adobe Reader for Unix."
"This issue will be resolved in the upcoming Adobe Reader for Unix updates," the post said. "Currently, we have not been able to reproduce an exploitable scenario for Windows and Macintosh, but we will continue to investigate."
The Adobe Reader and Acrobat problem involves possible exploits of JavaScript which allow remote attackers to cause a denial of service or execute arbitrary code via a PDF file.
Proof-of-concept exploit code for both flaws has been circulating the web, according to eWeek. Adobe said it is not aware of any attacks, the website reported.
Users are advised to disable JavaScript in Reader and Acrobat until the patch available.
Related News:
Cyber criminals target web security through PDFs again - 3.17.2010
Earlier this year, Adobe released a security update to patch a hole that cyber criminals exploited to upload malware onto the computers of unsuspecting users. However, Marian Radu, a web security researher for Microsoft recently announced on his blog that he had discovered a similar vulnerability.
Web security a growing issue for local governments - 3.16.2010
As though local school districts and governments didn't have enough to worry about, cyber criminals have targeted small public institutions and have stolen millions of dollars.
Web security ends with user - 3.16.2010
No matter how potent an antivirus software or other web security program is, the most important step in defending a computer from malware is vigilance on the part of the user, according to business technology news site Katonda.
Mac users may soon be under attack - 3.16.2010
People buy Macs because they think they don't have to worry about web security. However, according to ZDNet, ransomware and other dangerous forms of malware may soon be a very real problem for Mac users, as cyber criminals begin to understand the best ways to compromise the rapidly growing brand's products.
Forty percent of malware sites hosted in the U.S. - 3.16.2010
While popular opinion dictates that malware often originates in countries like China and Eastern European nations, AVG Technologies recently reported that 40 percent of malware originates on servers hosted within the U.S.
|
