Recent Posts

Community

Email Notifications

Personal Links

Archives

Harry Waldron - IT Security

Security Developments, Software Updates and Best Practices

PATCH NOW -- Adobe PDF exploits in-the-wild

0 As PDFs are one of the standard documents exchanged by businesses, this new malicious exploit has already infected thousands of users.  While McAfee and other AV companies offer detections of this new PDF based malware, it's important to move to v8.1.2 for the best level of protection (please see the link at the bottom for full version)

PATCH NOW -- Adobe PDF exploits in-the-wild
http://www.avertlabs.com/research/blog/index.php/2008/02/11/another-adobe-pdf-exploit-in-the-wild/
http://vil.nai.com/vil/content/v_144105.htm

QUOTE: McAfee Avert Labs is tracking an active exploitation of a recently patched vulnerability in Adobe Acrobat Reader now in the wild. The current vulnerability can be embedded in a PDF file and manipulated through Adobe JavaScript.  Complete mitigation requires upgrading Acrobat and Adobe Reader 7.x and 8.x to Version 8.1.2.

Adobe PDF exploit infects 'many thousands,' says researcher
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9061938

Security update available for Adobe Reader and Acrobat 8
http://www.adobe.com/support/security/advisories/apsa08-01.html

Affected software versions
-- Adobe Reader 8.1.1 and earlier versions
-- Adobe Acrobat Professional, 3D and Standard 8.1.1 and earlier versions

Adobe 8.1.2 PDF Reader site (22MB Download - uncheck Google toolbar option)
http://www.adobe.com/products/acrobat/readstep2.html