Adobe grappling with another PDF vulnerability

Powered by SC Magazine
 

Adobe again is staring down a zero-day vulnerability in its popular Reader software, according to a new security advisory.

According to the alert this week from Security Focus, Adobe Reader contains a JavaScript flaw that can be exploited to execute arbitrary code or crash the application.

Versions 9.1 and 8.1.4 are vulnerable, though other builds also may be impacted, the advisory said.

David Lenoe, posting on the Adobe Product Security Incident Response Team blog, said that the company was investigating reports and plans to release an update once it has more information.

Earlier this year, Adobe faced the music over another PDF flaw, which was being targeted in active attacks but took the software giant weeks to patch. Some observers criticised the company for the delayed disclosure of the bug and the subsequent slow fix, while others recommended using alternative PDF readers, such as Foxit.

Adobe representatives defended their stance, saying they did not want to reveal too much information to the bad guys. The company advised users to disable JavaScript until it delivered a patch, which was issued in March.

See original article on scmagazineus.com

Copyright © SC Magazine, US edition


Adobe grappling with another PDF vulnerability
 
 
 
Top Stories
Content, cost & constant innovation: How Foxtel plans to take on Netflix
Nell Payne inhabits the “brave new world of blue strings and networking”. Just don't ask her to put a TV screen on your microwave.
 
Sending in the drones
Margins are getting tighter in the industrial services industry, so Transfield Services' Stephen Phillips looks offshore - and to the skies - for the solutions he needs to keep pace.
 
Westpac fires starting pistol on core banking upgrade
St George readies itself for move to Celeriti.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Should Optus make a bid for iiNet?

   |   View results
Yes
  43%
 
No
  57%
TOTAL VOTES: 534

Vote