Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Virus, Spyware, and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


 
Reply to this topicStart new topic
> Adobe issues updates to Reader and Acrobat to address critical vulnerabilities
Grinler
post Jan 12 2010, 08:12 PM
Post #1


Bleep Bleep!
******

Group: Admin
Posts: 32,432
Joined: 24-January 04
From: USA
Member No.: 3



Adobe posted a security bulletin where they outline critical vulnerabilities in Adobe Reader and Acrobat that could allow a remote user or malicious program to gain control over your computer. To protect yourself, it is strongly advised that you download and install the latest version of Adobe Reader and Acrobat immediately. The current version is version 9.3 and can be downloaded at the link below.

Even if you do not use PDFs, having these programs installed on your computer while browsing the web puts your computer at risk. While browsing the web, a malware distributor or hacker could use use this vulnerability and allow hackers or malware to have full control over your PC. They do this by using javascript exploits or Iframes to automatically open specially crafted malicious PDF files in the vulnerable Adobe Reader without your permission. Once the malicious PDF is loaded by Adobe Reader or Acrobat, it will execute the commands integrated into the PDF on your computer without your knowledge or permission. These commands could further download other malware onto your computer without your knowledge that open backdoors or steal your information.

Therefore please update Adobe Reader and Acrobat now!



--------------------
Lawrence
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Go to the top of the page
 
+Quote Post
xblindx
post Jan 12 2010, 08:28 PM
Post #2


Forum Addict
******

Group: Members
Posts: 1,859
Joined: 21-September 08
From: NeverLand
Member No.: 240,362



Just curious, if you have FoxIt Reader installed as your default PDF reader, are you still vulnerable to the javascript exploits?


--------------------

Please help people in need for free by visiting Free Rice
Increase the security of your computer by using SpywareBlaster
Recommended Firefox Addons
Currently enrolled at Geek University
Please use the button to post a reply. Do not use the button
Go to the top of the page
 
+Quote Post
Grinler
post Jan 12 2010, 08:33 PM
Post #3


Bleep Bleep!
******

Group: Admin
Posts: 32,432
Joined: 24-January 04
From: USA
Member No.: 3



The exploits are not necessarily in javascript, but how the pdf is loaded.


--------------------
Lawrence
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Go to the top of the page
 
+Quote Post
freedie
post Jan 20 2010, 08:39 AM
Post #4


Member
**

Group: Members
Posts: 17
Joined: 16-December 09
Member No.: 418,433



I get this on that page for Adobe 9.3 link:-

Internet Explorer has stopped trying to restore this website. It appears that the website continues to have a problem.

Is there any other way to update my Adobe 8?

Ta!

Eddie
Go to the top of the page
 
+Quote Post
Grinler
post Jan 20 2010, 09:23 AM
Post #5


Bleep Bleep!
******

Group: Admin
Posts: 32,432
Joined: 24-January 04
From: USA
Member No.: 3



You can try opening reader and then under the help menu select check for updates.


--------------------
Lawrence
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Go to the top of the page
 
+Quote Post
freedie
post Jan 20 2010, 11:30 AM
Post #6


Member
**

Group: Members
Posts: 17
Joined: 16-December 09
Member No.: 418,433



Thanks for the quick reply Grinler!

I did try and got the info. that there are no new updates for Adpbe 8 ... which is probably true!

I am tempted to turn off DEP on Internet Explorer for just long enough to get this update/new program.

Will let you know how I get on.

Eddie
Go to the top of the page
 
+Quote Post
freedie
post Jan 20 2010, 01:39 PM
Post #7


Member
**

Group: Members
Posts: 17
Joined: 16-December 09
Member No.: 418,433



Very odd. Turned off DEP but IE8 still stopped the webpage; but noy quickly enough and got the Adobe Downlaod Manager. Ran that and Abode 9.3 installed OK ... removing Adobe 8 as it did so. All seems normal now. Wish I knew why it all happened as it did!

Ta! again for your swift help Grinler. Sorry I canot supply a useful suggestion/solution for anyone else who esperiences same problem.

Eddie
Go to the top of the page
 
+Quote Post
Bassplayer15
post Jan 20 2010, 07:42 PM
Post #8


Member
**

Group: Members
Posts: 52
Joined: 9-August 09
Member No.: 362,339



Took me a few tries to get to the web page, but I did finally get 9.3. Also not sure if this is a reoccurring problem, but when i went to Adobe -> Help -> Check For Updates it told me "There are no updates at this time." (or something along those lines.) Figured i warn people that even though they may get this message they could still have the vulnerable version.

Thanks for the timely security warning Grinler.


--------------------
Grace is given freely, but respect must be earned.
Go to the top of the page
 
+Quote Post
SeekingSolutions
post Feb 20 2010, 01:11 AM
Post #9


Member
**

Group: Members
Posts: 53
Joined: 17-February 10
Member No.: 455,656



Clicking on the first Adobe Link Link: Adobe APSB10-02 Security Bulletin took me to the FBI home page which featured an article about scam popups.
Interesting.
Second link went directly to Adobe 9.3 download. How can I be sure it's the genuine Adobe site? And is it possible to download the simple Reader - all of their flourishes eat up more memory than I can spare.
Go to the top of the page
 
+Quote Post
Grinler
post Feb 20 2010, 10:37 AM
Post #10


Bleep Bleep!
******

Group: Admin
Posts: 32,432
Joined: 24-January 04
From: USA
Member No.: 3



Those links are legit. As for the extras, just dont install them when they ask and you will just get reader.


--------------------
Lawrence
Become a BleepingComputer fan: Facebook
Follow us on Twitter!
Go to the top of the page
 
+Quote Post
Andrew
post Feb 20 2010, 01:05 PM
Post #11


Bleepin' Night Watchman
******

Group: Moderator
Posts: 4,872
Joined: 5-December 05
From: The City of Saint Francis, by the western sea
Member No.: 43,307



Those seeking to find a PDF reader without all the Adobe bloat have some choices. PDF X-Change Viewer and Foxit Reader are two of the most popular alternative PDF readers. I use X-Change Viewer myself.


--------------------
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 20th March 2010 - 05:39 PM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides

© 2003-2010 All Rights Reserved Bleeping Computer LLC.