Adobe discloses Reader, Acrobat flaw; can allow remote code execution

By

Adobe disclosed a vulnerability in its Reader and Acrobat products that can be exploited by remote attackers using malicious PDF documents.

Adobe discloses Reader, Acrobat flaw; can allow remote code execution
The flaw, acknowledged Friday by Adobe, exists in Adobe Reader version 8.1 and earlier versions, Acrobat Standard, Professional and Elements 8.1 and earlier and Acrobat 3D on PCs running Windows XP with Internet Explorer 7 installed, according to an advisory from the San Jose, Calif.-based company.

The vulnerability is caused by an input validation error when processing a specially crafted “mailto” link, according to FrSIRT.

Adobe said on Friday that the company's researchers are working on updated versions of the affected products to fix the issue.

FrSIRT and Adobe advised users to disable the mailto option in the Windows registry.

Meanwhile, researchers have reported that after an initial spike, attackers are turning away from PDF spam.

Secunia today updated a July advisory on a flaw in the way Windows handles URI commands, including Adobe Reader and Acrobat as possible attack vector.

The Copenhagen-based vulnerability monitoring firm advised users to avoid untrtusted websites, links or PDF files.

A Microsoft spokesperson said today that the Redmond, Wash.-based company is aware of flaw reports and investigating the issue.

See original article on SC Magazine US
Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

SA Water plans 'once-in-a-generation' core technology uplift

SA Water plans 'once-in-a-generation' core technology uplift

Ex-student charged over Western Sydney University cyberattacks

Ex-student charged over Western Sydney University cyberattacks

WhatsApp banned on US House of Representatives devices

WhatsApp banned on US House of Representatives devices

Victoria's first government tech chief steps down

Victoria's first government tech chief steps down

Log In

  |  Forgot your password?