Adobe Patches Zero-Day Vulnerability
Posted 03/15/09 at 12:59:32 PM by Justin Kerr
If you haven’t done so already, make sure your Adobe reader has checked for, and downloaded the latest updates. Adobe has finally released a patch for the zero day scripting vulnerability in its PDF software. The patch for version 9 hit the net a bit earlier than expected, but not a moment too soon to combat this now critically exploited weakness which has been in the wild now since December 2008. The patches for Version 7 & 8 are still planned for March 18th and users of this version would be advised to either upgrade to 9.1 or consider Foxit Reader.
The news was posted by Adobe blogger David Lenoe. "Today, we posted the Adobe Reader 9.1 and Acrobat 9.1 update, which resolves the recent JBIG2 security issue (CVE-2009-0658), including the 'no-click' variant of the vulnerability." "We encourage all Adobe Reader users to download and install the free Adobe Reader 9.1."
For those that haven’t been following the details of the exploit, the vulnerability is a result of an array indexing error in the processing of JBIG2 streams. Hackers have found a way to corrupt arbitrary memory using the PDF format and take control of compromised systems. The lesson learned here if we didn’t know it already, don’t take candy, or PDF’s from strangers.
I'm hardly a software
Submitted by wolf17 on Sun, 03/15/2009 - 7:18pm
I'm hardly a software engineer or anything so I could be wrong but even so I always get this image of swiss cheese when I think of Adobe software lmao.. full of holes :P
I have been using FoxIt reader for at least a year if not more and have been happy with it.
"Life is about living, not stressing" - a very smart girl :)
If you haven’t done so
Submitted by Gigabyte on Sun, 03/15/2009 - 12:27pm
If you haven’t done so already, make sure you uninstall Adobe and start using Foxit Reader 3.0!
http://www.foxitsoftware.com/pdf/reader/
I converted to FoxIt...
Submitted by Block_Dude on Sun, 03/15/2009 - 11:47am
only because of this exploit news. I consider it to be a better reader than the 41MB Adobe bloatware installer currently on Adobe's site.
another Foxit convert
Submitted by Queenof1 on Sun, 03/15/2009 - 10:53am
I d/l'd Foxit to one of my computers. I'm amazed at how fast it opens as opposed to Adobe. I'm going to switch over the rest of my PCs.
I just use Foxit exclusively
Submitted by Vegan on Sun, 03/15/2009 - 10:13am
I just use Foxit exclusively and have been happy with it. I haven't had any weird rendering problems or anything like that.
Feature
Review
Feature
Feature
Feature






