PrntRhd
04-16-2011, 11:08 AM
Adobe just released another new version of Flash to stem a security issue affecting both Flash and Acrobat/Acrobat Reader.
http://www.adobe.com/support/flashplayer/downloads.html
If you run Windows (which has IE on the PC) and have either application on the PC, you need to update Flash now and Acrobat/Reader later this week.
Current exploits are using Flash to attack PCs via IE using Excel spreadsheets, but the attacks can be rewritten to attack via pdf files quickly.
Adobe is asking Acrobat/Reader users to migrate to Acrobat/Reader X that includes a run-in-sandbox feature (similar to Chrome browser sandbox). Unfortunately the problem might be deeper than the initial execution, the malicious files remain on the PC and can cause cumulative damage:
http://www.zdnet.com/blog/security/adobe-reader-x-sandbox-leaves-residual-risk/7776
Greamo said these limitations will allow attackers that exploit these “protected” components to stay resident in memory and perform damaging activities such as:
* Read and exfiltrate data from the registry and/or user’s file system
* Attack other machines and devices on the network
* Use Reader as a stepping stone to execute other exploits against the host system including exploits against kernel services
http://www.adobe.com/support/flashplayer/downloads.html
If you run Windows (which has IE on the PC) and have either application on the PC, you need to update Flash now and Acrobat/Reader later this week.
Current exploits are using Flash to attack PCs via IE using Excel spreadsheets, but the attacks can be rewritten to attack via pdf files quickly.
Adobe is asking Acrobat/Reader users to migrate to Acrobat/Reader X that includes a run-in-sandbox feature (similar to Chrome browser sandbox). Unfortunately the problem might be deeper than the initial execution, the malicious files remain on the PC and can cause cumulative damage:
http://www.zdnet.com/blog/security/adobe-reader-x-sandbox-leaves-residual-risk/7776
Greamo said these limitations will allow attackers that exploit these “protected” components to stay resident in memory and perform damaging activities such as:
* Read and exfiltrate data from the registry and/or user’s file system
* Attack other machines and devices on the network
* Use Reader as a stepping stone to execute other exploits against the host system including exploits against kernel services