PDFs open critical hole in Internet Explorer
Print storyBotnet surprise
Posted in Enterprise Security, 1st December 2006 11:18 GMT
Free whitepaper – Vulnerability management buyer's checklist
A critical vulnerability has been identified in Adobe's Acrobat and Reader software which affects Internet Explorer users.
As well as causing crashes, the frailty could allow a botnet to take control of the whole computer when a PDF is opened within Explorer.
The hole is present in Acrobat Standard and Professional versions 7.0.0 to 7.0.8, and Adobe Reader 7.0.0 to 7.0.8. Only Microsoft's browser is vulnerable.
Adobe's programmers are working on a patch, which should be available on its support site soon. In the meantime, deleting AcroPDF.dll from the will prevent Explorer from opening PDFs in the browser window.
Adobe's advisory is here. ®
Airport insecurity: the case of lost laptops
Jump start your Application Security initiatives
Reducing messaging and web security costs with managed services
Avoiding 7 common mistakes of IT security compliance
Extended Validation SSL Certificates
Feds: Hospital hacker's 'massive' DDoS averted
Buggy 'smart meters' open door to power-grid botnet
Microsoft knew of nasty IE bug a year before attacks
BlockMaster SafeStick hardware-encrypted USB drive