The vulnerability could allow an attacker to gain control of the user's system by way of malformed JavaScript code. When exploited, the vulnerability leads to an application crash which leaves the user liable to remote control of their system and code execution from the attacker.
Such remote code execution flaws are a favorite method for covertly installing malware and are often regarded as the highest risks amongst software vulnerabilities.
Adobe has classified the flaw as 'critical,' the highest of its four security alert levels. The company noted that there is a heightened risk, as the flaw is currently being leveraged by attackers to spread malware in the wild.
Sans security researcher Jason Lam echoed Adobe's sense of urgency, recommending that users install the update as soon as possible.
"This is likely to appear in a malware spreading website near you soon given the track record of the botnet operators," he wrote.
_(5).jpg&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
.png&w=100&c=1&s=0)
Digital NSW 2025 Showcase
_(1).jpg&h=140&w=231&c=1&s=0)
