Adobe puts Acrobat flaw on the critical list
237111
PDF peril Adobe users are being urged to upgrade their software after the firm reassessed the impact of a recently discovered vulnerability in Adobe Reader and Adobe Acrobat 7.â¦
223094
Adobe released on Wednesday an update that fixes vulnerabilities in its widely used Reader document viewing program.Users are urged to upgrade to version 8.1.2, available for download on Adobe&#39;s Web site.Adobe has not given out details of the vulnerabilities, even though the company has a section on its Web site detailing security advisories for Reader.That could indicate that the vulnerabilities are fairly serious and could result in a compromised PC, said Thomas Kristensen, chief technical officer for Secunia, a security vendor in Denmark.Secunia is performing a binary analysis of the old and new versions of Reader to figure out the vulnerabilities. However, that analysis takes one to three days, Kristensen said.Kristensen said no proof-of-concept code has been seen yet and no attacks have been reported. But people should be especially cautious of PDFs (Portable Document Format), the common file type that Reader opens.&quot;PDFs are generally highly trusted,&quot; Kristensen said. &quot;It&#39;s a common format for exchanging information.&quot;Secunia estimates that more than 60 percent of home PC users have the Reader program, based on data from one of its software products that checks to see if programs have up-to-date patches. Corporate use of Reader is less, around 30 percent, since many companies use other business applications that can open PDFs, Kristensen said.Hackers seized on PDFs&#160;last year after the disclosure of a&#160;protocol handling vulnerability involving Windows. The problem allowed them to create malicious PDF documents that would infect a PC with malicious software if opened.Adobe officials could not be reached.&#160;
320729
Adobe fails to respond about a bug un-installing Flash, does not communicate will and tracks users of their CS3 software.
7285
According to an advisory published on security firm Secuniaâs website, a critical vulnerability exists in Microsoft Word, which can be exploited by a malicious code to cause a DoS (Denial of Service) and potentially compromise a user&#39;s system.
74744
The &quot;highly critical&quot; vulnerabilities stem from a flaw in IE&#39;s drag-and-drop feature and in the browser&#39;s security zone.
659188
A Reuters story this morning suggested that Adobe CEO Bruce Chizen, in an interview with the German financial weekly Euro am Sonntag, threatened to sue Microsoft if the outcome of antitrust proceedings against that company by the EC did not turn out in Adobe's favor. But our read of the interview suggests Chizen actually held this out as an option of last resort.
536283
A patch in time... Adobe has published an update fixing numerous security vulnerabilities in Adobe Flash.â¦
539029
Users running Intuitâs Apple Macintosh version of QuickBooks Pro 2006 and 2007 were warned that an automatic software update flaw can eradicate stored files.
642262
Adobe this week updated its Acrobat and Reader software to fix vulnerabilities spotted by security intelligence firm iDefense. Adobe this week updated its Acrobat and Reader software to fix vulnerabilities
212371
Adobe has issued a patch for Acrobat Reader to correct a vulnerability that could allow an atacker to take over a user&#39;s system with an infected PDF file.
292174
Software company Adobe issued a updated version of Acrobat for the Windows and the Macintosh OS X platforms this week, fixing three security holes that could be used to compromise a user&#39;s system.
112014
PC Magazine - A malicious PDF is exploiting a URL-handling flaw in Windows XP and Windows Server 2003 running IE7.
644473
Adobe Systems Inc. has released fixes for three critical vulnerabilities in Flash Player that could let hackers infect Windows, Mac OS X and Linux systems.
336010
PDF peril Adobe Reader may be subject to a security hole that creates a means for hackers to take over vulnerable Windows boxes simply by opening a maliciously constructed PDF document.â¦
546478
Security researchers report finding a "highly critical" security flaw in Oracle's JInitiator ActiveX control.
516374
Adobe today patched its Reader and Acrobat programs to fix a flaw involving malicious PDF files.
112380
(InfoWorld) - One day after patching a widely exploited flawÂ in its Internet Explorer browser, Microsoft Corp. has a new bug to worry about, this time in PowerPoint. Attackers have been exploiting a newly discovered bug in Microsoft's Office presentation software in extremely targeted attacks, McAfee Inc. reported Wednesday. Researchers were made aware of the attacks when a customer submitted two different malicious PowerPoint files, both of which exploited the same vulnerability, said Craig Schmugar, a virus researcher at McAfee. Both files installed malicious remote access Trojan software that then attempted to connect to an outside Web server, he said. Though McAfee is not releasing technical details of the exploit, the security vendor says that it has confirmed that the attack works on three versions of Office running on the Windows 2000 operating system: Office 2000, Office XP, and Office 2003. Other platforms and other Office applications may also be affected, but McAfee has not yet had time to complete its testing, Schmugar said. Schmugar has blogged about the issueÂ  . Microsoft issued a security advisory on the matter Wednesday, saying that the issue affects users of Microsoft Office 2000, Microsoft Office 2003, and Microsoft Office XP, as well as Microsoft PowerPoint 2004 for Mac. Microsoft's advisory can beÂ found here. As a workaround, Microsoft suggests that users open and view files using PowerPoint Viewer 2003. This software "does not contain the vulnerable code and is not susceptible to this attack," the advisory states. The PowerPoint viewer can beÂ downloaded here. Microsoft and other security vendors, including Symantec Corp. and McAfee, have added signatures to their security products so that they can detect this malicious code. Over the past few months, attackers have focused on Office, exploiting a number of undisclosed Office bugs in extremely targeted attacks, often on government agencies or contractors. These attacks usually take the form of an e-mail that has a malicious Office document attached and is sent to a small number of target victims This latest PowerPoint attack fits that pattern and was sent to a defense contractor, Schmugar said. He declined to provide further details on the intended victim. Because the attack has been extremely limited in scope it is considered to be a low risk for most users, Schmugar said. News of the attack comes the day afterÂ Microsoft issued an emergency patch for a widely exploited bug that affected the VML (Vector Markup Language) rendering engine used by Internet Explorer and Outlook. Hackers are exploiting this critical flaw in the browser via mass e-mail and on thousands of Web sites, security experts said. Microsoft's next set of security patches will be released Oct. 10. The software vendor did not say whether it plans to patch this latest PowerPoint flaw.