Adobe Security Vulnerability Under Attack
Adobe Systems is warning users about a zero-day bug affecting Adobe Reader, Flash Player and Acrobat that is actively being exploited by attackers. According to Adobe, the vulnerability exists in Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris, as well as the authplay.dll component that ships with Adobe Reader and Acrobat 9.x for Windows, Mac and Unix operating systems. If exploited, the vulnerability (CVE-2010-1297) could cause systems to crash and potentially allow attackers to execute code and take control of the affected system. The Flash Player 10.1 Release Candidate does not appear to be vulnerable, and Adobe Reader and Acrobat 8.x have been confirmed to be unaffected. The company said it will update the advisory when it has determined a schedule for releasing a patch. |
Comments (3)
The only sane choice to to uninstall all of Adobe's garbage, and permanently stop using it. Acrobat no longer offers any real utility - Adobe destroyed the format when they stupidly crammed JavaScript and Flash into the file spec. Morons.
Flash serves no purpose now that Theora is supported natively by Firefox - why people use Flash is a complete mystery. Acrobat is also easily replaced (the free OpenOffice can export pdfs, if you want to).
Posted by AC | June 5, 2010 11:51 AM
Hmmm...hey Adobe, Mr. Jobs probably wouldn't say it...so I will...told ya so!
Posted by Andrew | June 5, 2010 12:30 PM
Yet ANOTHER big gaping whole in Adobe
security...Yawn
Of course this "new" security issue is not new,
and Adobe has been told about it in the past
but because hackers were not
"Actively Exploiting it", Adobe did not
really seem to care.
This is sorta same "who cares" attitude
that Microsoft seems to have about the Windows 7
Medusa bug where hackers simply craft a rigged
image and your OS either crashes or executes
hacker code when this image reaches your screen,
no matter what program displayed it.
I seems to be the mindset of large companies
be it Adobe,Microsoft,AT&T etc etc.
As a collective their slogan to
customers seems to be....
(Shut the F up and turn out your pockets)
Posted by drclue | June 5, 2010 2:15 PM