UNpatched Adobe Reader Vulnerability

Question

The following was copied/pasted from http://secunia.com/advisories/37690/ : Description:A[n extremely critical] vulnerability has been reported in Adobe Reader and Acrobat, which can be exploited by malicious people to compromise a user's system.The vulnerability is caused due to an unspecified error and can be exploited to execute arbitrary code. The vulnerability is caused due to an unspecified error in the implementation of the 'Doc.media.newPlayer()' JavaScript method. This can be exploited to corrupt memory and execute arbitrary code via a specially crafted PDF file.NOTE: This vulnerability is currently being actively exploited.The vulnerability is reported in versions 9.2 and prior.This vulnerability is NOT yet patched:Do not open untrusted PDF files.Do not visit untrusted websites or follow untrusted links. ------------- Adobe 'will provide an update as soon as [they] have more information'.

ky331 · Answer

Fixed versions will reportedly be available by January 12, 2010.

Temporary work-around: Use the JavaScript Blacklist functionality to block the affected method...

( I assume this means via EDIT / Preferences / Javascript / UNcheck Enable Acrobat Javscript )

Virus & Spyware

Was this post helpful?