Adobe Reader, Now Featuring Safety Patch
Article by George Norman
On 05 Nov 2008
Core Security, company that specializes in penetration testing and provides security software solutions, has recently uncovered a buffer overflow-type security vulnerability in Adobe Reader as well as Adobe Acrobat. The vulnerability is locally and remotely exploitable, but it does not affect the latest Adobe Acrobat/Reader release version, version 9.0, nor does it affect the older 8.1.3 versions. An attacker could exploit this vulnerability only of you are using Adobe Reader and Adobe Acrobat v. 8.1.2.

That previous statement is not exactly accurate. What it should have said is that you are vulnerable to malicious attack if you keep using Adobe Reader 8.1.2 and Adobe Acrobat 8.1.2 without the recently released patch. For safety reasons it is important to update your Adobe software as soon as possible. Keep in mind that this is the only flaw ever to be discovered in this software product. The update will trigger itself automatically the next time you open Adobe Reader 8.1.2; if this does not occur, you can initiate a manual update by clicking on the Help tab and then Check for Updates.

Advertising

“Adobe Reader suffers from a stack buffer overflow when parsing specially crafted (invalid) PDF files. The vulnerability is caused due to a boundary error when parsing format strings containing a floating point specifier in the "util.printf()" JavaScript function. Successful exploitation of the vulnerability requires that users open a maliciously crafted PDF file thereby allowing attackers to gain access to vulnerable systems and assume the privileges of a user running Acrobat Reader. Adobe Reader version 9, which was released in June 2008, is not vulnerable to the reported problem,” says the Core Security advisory.

A security fix or patch has been made available as of Tuesday, the 4th of November. You are very well advised to patch the software or upgrade to v 8.1.3 or 9.0.



Tags: Adobe, Adobe Reader, Adobe Acrobat, Core Security
About the author: George Norman
George is a news editor.
You can follow him on Google+, Facebook or Twitter

I Hope you LIKE this blog post! Thank you!
What do YOU have to say about this
blog comments powered by Disqus
Popular News
By George Norman on 17 Aug 2017
With the blockbuster movie season upon us, Sony decided to celebrate the occasion with a sale: the Attack of the Blockbusters Sale that offers discounts of up to 50% (60% if you’re a PlayStation Plus member) on a ton of PS4 video games.
By George Norman on 17 Aug 2017
Samsung’s new T5 portable solid-state drive (PSSD) uses the latest 64-layer V-NAND technology, offers between 250GB and 2TB of storage capacity, has a lightweight and shock-resistant design that’s smaller than the average business card, and delivers industry-leading transfer speeds of up to 540 MB/s.
Related News
Sponsored Links
Hot Software Updates
Top Downloads
Become A Fan!
Link To Us!
Adobe Reader, Now Featuring Safety Patch
HTML Linking Code