Unsolved
This post is more than 5 years old
2 Intern
•
1K Posts
0
10559
February 13th, 2013 13:00
Adobe Reader and Acrobat being exploited by Zero day.
" Today, we identified that a PDF zero-day is being exploited in the wild, and we observed successful exploitation on the latest Adobe PDF Reader 9.5.3, 10.1.5, and 11.0.1 ".
http://blog.fireeye.com/research/2013/02/in-turn-its-pdf-time.html
However Adobe itself reported it yesterday.
http://blogs.adobe.com/psirt/2013/02/adobe-reader-and-acrobat-vulnerability-report.html
No Events found!
ky331
5 Journeyman
•
15.6K Posts
•
45K Points
0
February 14th, 2013 04:00
Secunia rates these vulnerabilities as "extremely critical" http://secunia.com/advisories/52196/
==========================================
Adobe has now confirmed two vulnerabiliites, noting "These vulnerabilities could cause the application to crash and potentially allow an attacker to take control of the affected system", and further, that "these vulnerabilities are being exploited in the wild in targeted attacks designed to trick Windows users into clicking on a malicious PDF file delivered in an email message". Adobe is working on a fix.
Per Adobe, users of Adobe Reader XI and Acrobat XI for Windows can protect themselves from this exploit by enabling Protected View, bygoing to
Edit > Preferences > Security (Enhanced), and selecting the "Files from potentially unsafe locations" option bubble.
http://www.adobe.com/support/security/advisories/apsa13-02.html
Remark: A Sophos article by Paul Ducklin advocates applying Protected View to ALL FILES (as opposed to only the "potentially unsafe" ones).
http://nakedsecurity.sophos.com/2013/02/14/no-patch-yet-for-pdf-exploits/
ky331
5 Journeyman
•
15.6K Posts
•
45K Points
0
February 17th, 2013 14:00
Adobe has announced that it expects to release an update/fix "during the week of February 18, 2013".