Microsoft, Adobe block zero-day attacks
Summary
Topics
Microsoft and Adobe Systems have announced that a recently released Microsoft toolkit can be used to block zero-day attacks targeting a security flaw in Adobe's Acrobat and Reader programs.
In an advisory published on Friday, Microsoft detailed how its Enhanced Mitigation Experience Toolkit 2.0 could be used to short-circuit the threat. Adobe, which has not yet released a patch, updated its original advisory to reflect the new information.
Adobe considers the flaw to be "critical" — it could let an attacker take control of any of the millions of computers running what is far and away the most popular PDF viewing system.
For more on this story, read Microsoft, Adobe: PDF security flaw treatable on CNET News.
Just In
Your snide remark showcases your ignorance. What Microsoft is doing is not new, this is just one thing it does:
http://en.wikipedia.org/wiki/Buffer_overflow_protection
Microsoft is simply making it much harder for rogue code to be injected into an application and have it be executed. At best, using EMET prevents the local reading of files, e.g., browser cookies and any other file you can normally read/write to. Yeah they could delete all your files or something else that could be labeled "mischievous" but people leveraging this type of malware are usually more interested in stealing your money than plastering a lewd picture on your desktop.
At worst, your system won't get botted/backdoored.
-M
Join the conversation!
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
Vendor Showcase
Facebook Activity
