Software monster Adobe has recently urged to the users for being cautious while handling PDF files following the discovery and subsequent attack of a flaw in Adobe software. The spokesperson of Adobe said that it had received reports of attacks targeting a previously unknown flaw in both Adobe Reader and Acrobat.
When exploited, this flaw allows an attacker to remotely execute a malicious code on a targeted system. The code is believed to effect version nine and earlier of both Acrobat and Reader. According to several security firms, the vulnerability exists in the way both programs handle JavaScript within PDF files. The infected files trigger a memory buffer overflow, which in turn allows the attacker to remotely execute code on the targeted system.
However, these types of attacks proved the most damaging factor and it is only a
matter of time before this exploit ends up in every exploit pack on the internet. Adobe said that users should expect to see a fix for the vulnerability by March 11.
In the meantime, researchers at several security agency and the US Computer Emergency Response Team recommend that users should disable the ability for documents to execute Javascript code in both Acrobat and Reader using the application's preference panel.



Reply With Quote
Copyright Techfuels
Bookmarks