Adobe patches Reader flaw
PDF flaw affects affect older, infirm package
Customer Success Testimonial: Recovery is Everything
Security watchers are warning of a critical flaw affecting older versions of Adobe Reader.
Hackers might be able to exploit the bug using specially crafted pdf files with JavaScript content, Core Security warns. Ivan Arce, CTO at Core Security, said the security bug was discovered while investigating a previously disclosed problem in Foxit, an alternative pdf viewer package.
Successful exploitation against the Adobe Reader flaw would involve tricking users into opening a laced pdf file. The flaw only affects users of Adobe Reader 8, which was replaced by Adobe Reader 9 in June 2008. Nonetheless Core argues that many users are still running older versions of the software and are therefore at risk of attack.
Adobe has issued a security patch to fix the flaw, which affects versions 8.1.2 and below of Adobe Reader. If applying the update isn't immediately possible then disabling Javascript functionality should suffice as a workaround. ®
COMMENTS
Core security Vulnerability Advisory
Here's a link to the actual Core Security vulnerability advisory on the CoreLabs homepage: http://www.coresecurity.com/content/adobe-reader-buffer-overflow .
Acrobat reader alternative?
I agree with AC's comments on Acrobat Reader bloat. I'm also sick of getting pop-up reminders about updates every time I open a PDF (and that's with a recent version of the program). Fair enough, it's good to know that they're offering updates to improve security, but as far as I know it's not possible to set the program to check for updates only once a month or so. I'm going to give an alternative - PDF Xchange Viewer a try.
Why Worry...
...Be happy. Get rid of Adobe Reader and get Foxit Reader. Free, works beautifully, lasts a long time. Well, for Windows.
IT infrastructure monitoring strategies
What you need to know about cloud backup
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Customer Success Testimonial: Recovery is Everything
