Adobe issues fix for Acrobat, Reader to block ongoing Flash attacks

News

Adobe issues fix for Acrobat, Reader to block ongoing Flash attacks

SearchSecurity.com Staff

Adobe Systems Inc. issued an update for users of its Reader and Acrobat products, fixing a serious Flash Player zero-day vulnerability that has been an active target of attackers.

Adobe issued a security update Thursday, repairing critical flaws that affect current versions of Adobe Reader and Acrobat for Windows.

Attacks targeting the vulnerability have used specially crafted Flash files embedded in a Microsoft Word document or Excel spreadsheet and delivered them as an attachment. The flaw enables an attacker to execute malicious code and gain control of a victim’s machine.

Adobe addressed the vulnerability in its Flash Player earlier this month. The company is advising users of Mac OS X and Windows to use update utilities to acquire the patch.

Adobe said it would issue a fix for Adobe Reader X for Windows during its regularly scheduled update on June 14.  Adobe said the flaw is not as serious for Reader X, because running that version of the product in Protected Mode prevents the exploit from executing.

Current Adobe Reader products for UNIX, Adobe reader for Android, and Adobe Reader

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

and Acrobat 8 remain unaffected by this vulnerability.

~Ryan Cloutier


Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.