Yet another security flaw surfaces in Adobe Reader
It hasn't been the best couple of weeks for Adobe Reader.First there was the advice from F-Secure's Mikko Hypponen to stop using Reader and switch to an alternative. Now there's word of a new security flaw that is known to affect versions 8.14 and 9.1 for Linux and could also affect other versions of the program on other operating systems.
The exploit takes advantage of the javascript getAnnots() function in Reader and could, as with its predecessor, allow an attacker to remotely execute arbitrary code.
Even the U.S. Department of Homeland Security is on the case. They advise temporarily disabling javascript as an intermediate fix:
"To disable JavaScript in Adobe Reader, open the General Preferences dialog box. From the Edit-Preferences-JavaScript menu, un-check Enable Acrobat JavaScript."Adobe has acknowledged the problem in a blog post, though it states nothing more than "we know about it, and we'll have an update once we get more information." Security is serious business. Let's hope Adobe jumps to the pump this time and promptly issues a patch.
[via CNet]












Comments
4
Subscribe to commentsKenn.keeperApr 28th 2009 8:29PM
Foxit Reader is a better alternative, much faster,,,,,and it's free.
Kenn.....
QuikboyApr 28th 2009 9:58PM
Is that a surprise?
Has anyone tried using the XPS format? Does it work better than PDF?
sRcApr 28th 2009 11:04PM
I use XPS format all the time for printing stuff when I dont have a printer connected (which is most of the time), works well enough for me.
visalittleboyApr 30th 2009 10:24AM
That why sometimes when i launch Adobe Reader, it show up with some errors!
Thanks for info!