Adobe fixes six critical holes in Acrobat Reader2012-01-11 15:57 by DanielaTags: Adobe, Acrobat Reader
Adobe fixed six critical vulnerabilities in its Reader and Acrobat software, including the two zero-day flaws in its 3D rendering technology identified last month. While Adobe patched Reader 9 on Windows almost a month ago, it deferred updates for Reader 10 on all platforms, and for Reader 9 on Mac and Linux. The exploits would fail if aimed at Reader 10 because of that version's protective "sandbox" technology, Adobe said, and Mac and Linux users were in little danger because attackers were focused on Windows PCs. Adobe also added a new feature in Reader and Acrobat that gives administrators the ability to control whether or not to execute JavaScript code embedded in PDF files, Priyank Choudhury, a security researcher with the Adobe Secure Software Engineering Team. The new JavaScript whitelisting capability allows administrators to identify trusted documents in which JavaScript can be executed and disabling it for all other PDF documents. Read more -here-
Post your review/comments
rate:
avg:
|