 |
|
|
Adobe warned all users to watch out when working with PDF files. The warning came after the discovery of a flaw in Adobe software and an attack that exploited it as well.
Adobe spokespeople said the company received reports of attacks targeting a previously unknown flaw in both Adobe Reader and Acrobat. The vulnerability allows an attacker to remotely execute code on a targeted system. Security experts said the flaw allows hackers to install malicious software when users open a booby-trapped PDF file which trigger a memory buffer overflow.
Adobe issued the warning and advisory note on Thursday saying that the Adobe Reader and Adobe Acrobat have a flaw that can be exploited by hackers to take complete control over a system if its user opens an affected PDF file.
The company said an update of the software that will not contain the vulnerability won’t come earlier than March 11. Versions 9 and earlier are believed to contain the flaw.
According to Shadowserver security firm, the vulnerability is actually in the way the Reader and the Acrobat handle JavaScript within PDF files.
“These types of attacks are frequently the most damaging and it is only a matter of time before this exploit ends up in every exploit pack on the Internet," Shadowserver volunteer Steven Adair wrote on a group’s blog.
Until the updated versions of the Adobe programs are ready, the US Computer Emergency Response Team advises users to disable the ability for documents to execute Javascript code in both Acrobat and Reader. This can be done through the program’s preference panel.
© 2007 - 2009 - eFluxMedia