Adobe's security woes continue as new exploits found in Reader, Flash
2009 has been a rough one so far for Adobe when it comes to security. Reader has become an increasingly popular target for malware authors, and Flash has been plagued with vulnerabilities.
Trend Micro reaserchers have hit on new flaws in Adobe Reader 9.1.2, and Flash Player 9 /10. According to Trend, "Once a user opens a specially crafted PDF file, two binary executables are dropped and executed on his/her system." Adobe's blog post states "There are reports that this vulnerability is being actively exploited in the wild via limited, targeted attacks against Adobe Reader v9 on Windows" though other platforms are also vulnerable. A workaround is offered, though you may want to use an alternative PDF viewing application like Sumatra, xPDF, or Foxit Reader. You can also use a web-based service like Zoho Viewer or PDFMeNot.
Even after announcing they would switch to a Microsoft-style "Patch Tuesday" schedule to redouble their security efforts, the exploits keep on surfacing. It's a major problem for us all, since both Flash and Reader are so widely used. We know Adobe said they're re-committing themselves to security, so let's hope they follow through.
Trend Micro reaserchers have hit on new flaws in Adobe Reader 9.1.2, and Flash Player 9 /10. According to Trend, "Once a user opens a specially crafted PDF file, two binary executables are dropped and executed on his/her system." Adobe's blog post states "There are reports that this vulnerability is being actively exploited in the wild via limited, targeted attacks against Adobe Reader v9 on Windows" though other platforms are also vulnerable. A workaround is offered, though you may want to use an alternative PDF viewing application like Sumatra, xPDF, or Foxit Reader. You can also use a web-based service like Zoho Viewer or PDFMeNot.
Even after announcing they would switch to a Microsoft-style "Patch Tuesday" schedule to redouble their security efforts, the exploits keep on surfacing. It's a major problem for us all, since both Flash and Reader are so widely used. We know Adobe said they're re-committing themselves to security, so let's hope they follow through.













Comments
2
Subscribe to commentsmrmafatlalJul 24th 2009 8:21PM
ya its true
I had adobe reader 7 so i tried to update it with reader 9 but while i was installing it my computer screen turn blue with security message
DeathSkullJul 24th 2009 8:55PM
Considering how much they charge for there Adobe Professional products, whether its a complete package or upgrade, I think it's wrong that Adobe can't do proper bug/security screenings especially since other PDF viewers don't have anywhere near the number of problems. I can understand a few issues here and there but it seems like this happens every few weeks at most.