ie8 fix
madison

Adobe fixes 28 holes in Reader and Acrobat

Elinor Mills CNET News | October 14, 2009 7:19 AM PDT

Summary

Adobe released a security bulletin that includes fixes for 28 vulnerabilities in Adobe Reader and Acrobat, including a critical hole that has reportedly been exploited.
Adobe on Tuesday released a security bulletin that includes fixes for 28 vulnerabilities in Adobe Reader and Acrobat, including a critical hole that has reportedly been exploited in the wild in limited attacks.

Also read: New Adobe PDF flaw under attack; Patch coming Tuesday

Affected software includes version 9.1.3 of Reader and Acrobat; Acrobat 8.1.6 for Windows, Macintosh, and Unix; and version 7.1.3 of Reader and Acrobat for Windows and Macintosh. The vulnerabilities could cause the applications to crash and could allow an attacker to take control of a user's computer, according to the security advisory.

One of the updates addresses a hole that Trend Micro says has been exploited by a Trojan horse that arrives as a PDF file containing malicious JavaScript. That exploit affects Microsoft Windows 98, ME, NT, 2000, XP, and Server 2003, according to Trend Micro.

Read more on "Adobe fixes 28 holes in Reader and Acrobat from CNET News.

8
Comments

Join the conversation!

Just In

RE: Adobe fixes 28 holes in Reader and Acrobat
zz_james 21st Oct 2009
I don't understand why Adobe has gone this route with recent Acrobat Reader releases. What I want in a pdf reader is something fast and light, what I have is something slow which takes an age to load and become interactive. And why the heck does it need to have javascript capabilities anyway? Both Adobe and Microsoft (and yes Apple come to think of it) need to think about whether loading features onto a package is really adding value, now it the time in software development to think about reliability, efficiency and security AS FEATURES not interactive widgets and the ability to go on line and sync with your telephone or whatever the latest fad is.
0 Votes
+ -
Ask yourself this question......
SoYouSaid 14th Oct 2009
Why does it take Trend Micro to discover all these wholes? Yesterday it was Microsoft with 34 holes/what ever and today its Adobe with 28 holes .........

why is the end user having to suffer from their lack of proper testing ....... If they can't do the job correctly, maybe they should hire Trend Micro to do there testing before they release their damb products to the mar5ket place........... but what do I know I'm only a end user...........
0 Votes
+ -
When you learn how to code 100% foolproof software..
Confused by religion 14th Oct 2009
... the world will beat a path to your door throwing cash at you.

However, since all software is coded by humans and humans are fallible, no code will ever be 100% foolproof.

Anything man can do, man can also undo.
Why does it take Trend Micro to discover all these wholes? Yesterday it was Microsoft with 34 holes/what ever and today its Adobe with 28 holes .........

Like using the word "wholes" when the correct word is "holes".
Come on... you know its going to happen......
0 Votes
+ -
Sometimes
magallanes 16th Oct 2009
Sometimes i don't known if we are talking about Software or Golf.

:-/
0 Votes
+ -
Forget About That Debate
VoiceOfLogic 17th Oct 2009
Where is the debate on how ****** Acrobat REALLY is. Bloated AND locks up way too much for me to even consider using it.
0 Votes
+ -
Linux vs Windows
barence773 19th Oct 2009
OK. Here is a two-fer: Acrobat Reader is scary and bloated, but I don't use it on my Linux machines. Although the Linux version,'acroread,' is available in the repositories, I use the Free-and-open-source 'evince' PDF reader instead. Since all programs can print to a PDF file, I do not need to install any PDF-maker software. (PDF has been an open standard since 01-JAN-2008.)

I don't know whether evince is vulnerable to the same attacks as Acrobat.
0 Votes
+ -
I don't understand why Adobe has gone this route with recent Acrobat Reader releases. What I want in a pdf reader is something fast and light, what I have is something slow which takes an age to load and become interactive. And why the heck does it need to have javascript capabilities anyway? Both Adobe and Microsoft (and yes Apple come to think of it) need to think about whether loading features onto a package is really adding value, now it the time in software development to think about reliability, efficiency and security AS FEATURES not interactive widgets and the ability to go on line and sync with your telephone or whatever the latest fad is.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

ie8 fix