Adobe issues long-awaited Reader security fix

Adobe has released a security update to address a flaw the company first warned users of in February.

Adobe has released a security update to address a flaw the company first warned users of in February.

The company said that the update should patch a flaw in Reader 9 and Acrobat 9 which could allow an attacker to use a specially-crafted PDF file to cause a crash and take control of a targeted system.

The security fix will update both the Mac and Windows versions of Adobe Reader and Acrobat to version 9.1. The company is planning to release fixes for the Unix version of the software as well as earlier versions of both applications later in the month.

Along with Adobe, security experts from the US Computer Emergency Response Team and Sans are recommending that users update to the 9.1 versions of the software if at all possible.

The update comes more than two weeks after Adobe first warned of the threat, which has been actively exploited in the wild. At the time, the company estimated that the first patches for the flaw would not be out until March and users were advised to disable Javascript code within PDF files.

However, just days after Adobe released its advisory on the attacks and a timeline for a fix, an independent researcher constructed a home-made patch for Windows systems.

Copyright ©v3.co.uk

What are your thoughts on this article? Add your comment below.

To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.

NOTE: You must be a registered member of SC Magazine to post a comment.

Click here to login | Click here to register
comments powered by Disqus
Sign up to receive SC Magazine email newsletters
   FOLLOW US...
Most Read