Adobe Reader, Now Featuring Safety Patch
Article by George Norman
On 05 Nov 2008
Core Security, company that specializes in penetration testing and provides security software solutions, has recently uncovered a buffer overflow-type security vulnerability in Adobe Reader as well as Adobe Acrobat. The vulnerability is locally and remotely exploitable, but it does not affect the latest Adobe Acrobat/Reader release version, version 9.0, nor does it affect the older 8.1.3 versions. An attacker could exploit this vulnerability only of you are using Adobe Reader and Adobe Acrobat v. 8.1.2.

That previous statement is not exactly accurate. What it should have said is that you are vulnerable to malicious attack if you keep using Adobe Reader 8.1.2 and Adobe Acrobat 8.1.2 without the recently released patch. For safety reasons it is important to update your Adobe software as soon as possible. Keep in mind that this is the only flaw ever to be discovered in this software product. The update will trigger itself automatically the next time you open Adobe Reader 8.1.2; if this does not occur, you can initiate a manual update by clicking on the Help tab and then Check for Updates.

Advertising

“Adobe Reader suffers from a stack buffer overflow when parsing specially crafted (invalid) PDF files. The vulnerability is caused due to a boundary error when parsing format strings containing a floating point specifier in the "util.printf()" JavaScript function. Successful exploitation of the vulnerability requires that users open a maliciously crafted PDF file thereby allowing attackers to gain access to vulnerable systems and assume the privileges of a user running Acrobat Reader. Adobe Reader version 9, which was released in June 2008, is not vulnerable to the reported problem,” says the Core Security advisory.

A security fix or patch has been made available as of Tuesday, the 4th of November. You are very well advised to patch the software or upgrade to v 8.1.3 or 9.0.



Tags: Adobe, Adobe Reader, Adobe Acrobat, Core Security
About the author: George Norman
George is a news editor.
You can follow him on Google+, Facebook or Twitter

I Hope you LIKE this blog post! Thank you!
What do YOU have to say about this
blog comments powered by Disqus
Popular News
By George Norman on 21 Jul 2017
Firefox Focus for Android, the ad-blocking browser that Mozilla rolled out back in June, has reached a very important milestone: 1 million downloads. To celebrate this joyous occasion, Mozilla decided to update the browser and add 3 features that people had been asking for.
By George Norman on 21 Jul 2017
Unto the Evil, Hell Followed and Bloodfall, the 3 multiplayer DLCs that used to cost money, are now free for anyone who owns the brutally fun first person shooter, Doom. And that’s not all that Update 6.66 has to offer.
Related News
Sponsored Links
Hot Software Updates
Top Downloads
Become A Fan!
Link To Us!
Adobe Reader, Now Featuring Safety Patch
HTML Linking Code