Posted by Virus Bulletin on Feb 17, 2010
Unscheduled update released by Adobe.
Adobe has released an unscheduled patch for its Reader and Acrobat programs to address some critical flaws.
The software company's fixes usually follow a quarterly release schedule, and last month saw a bumper crop, so none were expected to be published this month, but the vulnerabilities in Reader and Acrobat were sufficiently severe to warrant an out-of-cycle update.
The update addresses two critical vulnerabilities, the first of which could be used to subvert the domain sandbox and make unauthorized cross-domain requests, and the second of which could cause the application to crash and could potentially allow an attacker to take control of the affected system.
Users are urged to upgrade to Acrobat version 9.3.1 and Reader version 9.3.1.
Adobe has come under increasing fire for its record on vulnerabilities of late, with many experts predicting an increase in the growth of malware using PDF and Flash exploits over the coming year.
Adobe's security bulletin can be found here. Comment on the release can be found at The Register here.
Posted on 17 February 2010 by Virus Bulletin
