Exploits plague Adobe Reader and Acrobat
620918
In response, Adobe releases a new version of both Acrobat and Reader.
192866
Adobe on Tuesday released the first major update to both Acrobat and Reader 8.0, adding support for Windows Vista and remote printing capabilities through a partnership with FedEx Kinko's. Version 8.1 also brings integration with Microsoft Office 2007.
223094
Adobe released on Wednesday an update that fixes vulnerabilities in its widely used Reader document viewing program.Users are urged to upgrade to version 8.1.2, available for download on Adobe&#39;s Web site.Adobe has not given out details of the vulnerabilities, even though the company has a section on its Web site detailing security advisories for Reader.That could indicate that the vulnerabilities are fairly serious and could result in a compromised PC, said Thomas Kristensen, chief technical officer for Secunia, a security vendor in Denmark.Secunia is performing a binary analysis of the old and new versions of Reader to figure out the vulnerabilities. However, that analysis takes one to three days, Kristensen said.Kristensen said no proof-of-concept code has been seen yet and no attacks have been reported. But people should be especially cautious of PDFs (Portable Document Format), the common file type that Reader opens.&quot;PDFs are generally highly trusted,&quot; Kristensen said. &quot;It&#39;s a common format for exchanging information.&quot;Secunia estimates that more than 60 percent of home PC users have the Reader program, based on data from one of its software products that checks to see if programs have up-to-date patches. Corporate use of Reader is less, around 30 percent, since many companies use other business applications that can open PDFs, Kristensen said.Hackers seized on PDFs&#160;last year after the disclosure of a&#160;protocol handling vulnerability involving Windows. The problem allowed them to create malicious PDF documents that would infect a PC with malicious software if opened.Adobe officials could not be reached.&#160;
524269
Greg Bever has a (very) quick post about his experiences with the Pixy XSS and SQLI Scanner running against PEAR files.   I tried out the Pixy XSS and SQLI Scanner (http://pixybox.seclab.tuwien.ac.at/pixy/index.php) on a few simple PEAR files.  On the first, I got a java exception, on the second it was unable to resolve the simplest of includes (no ability to resolve include_path). In short, the thing is useless for anything written using PEAR.  Fun!   The Pixy XSS and SQLI Scanner is made to find SQL and XSS injection issues in scripts. It runs as a Java application and scans PHP4 source code to try to find problems. For more information on the scanner or to try it out for yourself, check out the project's homepage for documentation and downloads.
305407
New products will include a free Acrobat reader with reviewing capabilities.
295900
Adobe (Quote, Chart) issued a patch this week that helps prevent multiple flaws found in its products. The fixes clear up problems in Windows and Macintosh systems running Adobe Reader and Acrobat Pro versions
611813
A tool has been posted online that can apparently crack Vista's activation process by applying brute force -- and lots of time -- to come up with valid product keys. But the author is now telling users it's wrong to use it.
313451
PDF attack prompts round-the-clock patch fest Escalating attacks exploiting a serious weakness in PDF files have prompted Microsoft to issue an all-hands-on-deck call to fix a vulnerability that lurks in the bowels of Windows XP.â¦
337058
Unpatched bugs that could allow attackers to take over Windows systems via Internet Explorer. The bugs were discovered by security company FrSIRT and reported to Adobe a week ago.
603661
Acrobat 8 line, due in November, will allow people to view a common PDF file via a Web browser.
23136
The hacker who discovered a recently patched QuickTime flaw affecting the Firefox browser says he has found an equally serious flaw in Adobe Systems Inc.&#39;s PDF file format.
112014
PC Magazine - A malicious PDF is exploiting a URL-handling flaw in Windows XP and Windows Server 2003 running IE7.
728399
New PostScript RIP gives designers more options in output formats.
212371
Adobe has issued a patch for Acrobat Reader to correct a vulnerability that could allow an atacker to take over a user&#39;s system with an infected PDF file.
302277
Both Windows and Mac versions of the multimedia program have a buffer overflow flaw that puts users at risk.
70846
Adobe Systems Inc. will release version 7.0 of its digital document product Acrobat by the end of the year, including a new free Acrobat Reader with added reviewing capabilities, the company announced Monday.
584261
Until the vulnerability is patched, users should avoid opening unexpected Word documents.