Adobe issues zero-day warning for Reader, Acrobat -- again.
Anyone else having deja vu?
Adobe's improved security efforts have been a welcome change, but it sure seems like they're still not doing enough. Of course, it's also possible that things have been footloose and fancy-free for so long that it's going to take a while to sort out. They've promised sandboxing is coming, and that should help.
In the meantime, however, we're going to see more news like this: there's yet another new exploit which could allow an attacker to remotely exploit code on a compromised machine.
That's bad.
But at least they've identified the hole. That's good.
They also admit they're not sure how to mitigate the vulnerability. That's bad.
Adobe are, however, sharing information with various security firms to that your favorite anti-malware app can protect you. That's... er... something.
Once people like Microsoft, Symantec, and Eset have updated their defenses you should be ok until Adobe sorts things out.
Anyone else having deja vu?
[via CNet]
Adobe's improved security efforts have been a welcome change, but it sure seems like they're still not doing enough. Of course, it's also possible that things have been footloose and fancy-free for so long that it's going to take a while to sort out. They've promised sandboxing is coming, and that should help.
In the meantime, however, we're going to see more news like this: there's yet another new exploit which could allow an attacker to remotely exploit code on a compromised machine.
That's bad.
But at least they've identified the hole. That's good.
They also admit they're not sure how to mitigate the vulnerability. That's bad.
Adobe are, however, sharing information with various security firms to that your favorite anti-malware app can protect you. That's... er... something.
Once people like Microsoft, Symantec, and Eset have updated their defenses you should be ok until Adobe sorts things out.
Anyone else having deja vu?
[via CNet]













Comments
8
Subscribe to commentsbenSep 8th 2010 7:05PM
everybody should just switch over to foxit already.
There is virtually no reason to use Adobe's reader on Mac or PC.
hazardSep 8th 2010 8:19PM
.. if you're happy with terrible print support and limited feature set. I've come across various files Foxit can't render or print with the only option being to install Adobe Reader. I'd prefer to use Foxit but I've had so many failures with it that I just don't bother anymore :(
Security is something you can manage. Failure to render/print a file isn't.
Gardiner WestboundSep 8th 2010 7:06PM
Install Foxit Reader, and your problems will go away.
Zach Al-NasserSep 9th 2010 12:57AM
Go open source and use Sumatra
http://blog.kowalczyk.info/software/sumatrapdf/index.html
DrakkenfyreSep 8th 2010 7:47PM
A ridiculously large, bloated, slow PDF reader with assloads of vunerabilities, or a small, lightweight safer alternative. Make your choice.
I want to facepalm everytime I see Acrobat Reader on someone's pc. It's such a pain in the ass because it's bundled into damn near anything. They buy a digital camera and pop the CD in? The manual is in PDF format, and the CD installs Acrobat. They buy a printer and want to read the manual? On the CD, in PDF format, and it automatically installs Acrobat. Hell, I have seen CD's that automatically install it even if they DON'T select the manual option.
youngorthoSep 8th 2010 9:06PM
This is why I kicked these assclowns to the curb a year ago. There are just too many other options out there that offer the same functionality without the large security risk.
pacjack360Sep 9th 2010 3:21AM
Microsoft needs to hurry up an implement a built-in PDF reader into Windows in the same respect that OS X has Preview
GregSep 9th 2010 8:41AM
Another Foxit user here. There's not much it won't display, and it's really quick. 'hazard' has a point though. Some .pdf's just won't render properly in anything but Adobe's pile of fail.