One guy acting strangely is a nut. A bunch of people doing the same thing is called a church. - Shawn Mahaney
|
|
|
Adobe rushes out two patches
ELECTRONIC DOCUMENTS TOOLMAKER Adobe has released emergency updates to patch a pair of critical vulnerabilities in its popular PDF viewing and editing software.
Adobe ranked both bugs as critical. Last week we were told that the software outfit would issue rush patches for Adobe Reader and Adobe Acrobat.
The first flaw fixed was identical to the cross-domain request vulnerability that was recently fixed in Flash Player while the second was a vulnerability that attackers could exploit to install malware on a targeted machine.
The Flash Player bug tagged as CVE-2010-0186 cannot be used to inject malicious code into a system, but could be exploited by information thieves in a cross-site scripting attack.
The second vulnerability, tagged as CVE-2010-0188, was reported by Microsoft. Adobe is not releasing much in the way of details about it.
Insecurity experts tell us that hackers will be looking closely at the second patch. They might hope that if they can reverse engineer it then they can come up with an exploit for unpatched machines.
The suggestion is to patch machines where this Adobe software is loaded as quickly as possible. µ
Share this:
Share
In light of further Adobe security concerns, whereby many businesses and consumers are questioning the real capabilities of their document creation software, I think it’s important that they're aware of how to protect their PDFs.
Here are some top tips on PDF security by Global Graphics (http://bit.ly/GlobalGraphicssecurity):
1. Keep your PDF software and virus software updated by visiting your providers' website
2. Don’t open PDFs from people you don’t know, no matter how tempting the title!
3. Keep an eye out for any PDF security advice coming out from the likes of SANS
4. Be wary of PDF software that has had security scares or is targeted by hackers. There are alternatives.
5. If you do use free PDF software from smaller providers, make sure you know they have strong support services
It's called Foxit reader miles better than A.R plus it's not as bloated.
Done. Completed. Safe?
Ah well when there is one bug ther is another little bugger somewhere lurking...