Another five, less severe bugs impact related software, including the VMware Workstation, Server ACE and Player products, according to a separate Secunia advisory. The flaws, drawing a "moderately critical" rating, can be used in privilege escalation and DoS attacks.
Meanwhile, the same researcher who discovered the QuickTime-Firefox flaw that was patched this week, today disclosed a "high-risk vulnerability" affecting Adobe Acrobat and Reader.
"All it takes is to open a PDF document or stumble across a page which embeds one," Petko D. Petkov said on his Gnucitizen website. "The issue is quite critical given the fact that PDF documents are in the core of today's modern business."
He said the vulnerability was identified on Windows XP using the latest Adobe Reader version. Petkov added that he does not plan to publish proof-of-concept code – as he did in the case of the QuickTime flaw – because Adobe produces closed-source software.
An Adobe spokesperson could not be immediately reached for comment.
See original article on SC Magazine US
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
.png&w=100&c=1&s=0)
Private AI vs Public AI: How your organisation can securely adopt AI without compromise and excessive cost
iTnews Benchmark Security Awards 2025
Digital Leadership Day Federal
Government Cyber Security Showcase Federal
Government Innovation Showcase Federal
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
