[ insider_reports_insider ]
Adobe Reader Still Open To Exploits
David Utter
Staff Writer
2007-01-10
 Insider Reports RSS Feed
The continued shift of attacks from operating system components to application software has compelled security researchers to comb popular apps for vulnerabilities. Older versions of Adobe Reader have again been found with a weak spot.
 | | Adobe Reader Still Open To Exploits |  |
Only a week after warnings of a flaw in how older versions of Adobe Reader plugins could pass unsanitized code that could lead to a cross-site scripting exploit has another problem been spotted.
This time like the sanitzation flaw, the problem rests in Adobe Reader version prior to 7.0.9. Version 8 is not impacted by this new vulnerability, and it's starting to look like Adobe quietly fixed quite a few issues in their newest Adobe Reader.
The latest problem disclosed by advisory firm Secunia documented how Adobe Reader could be susceptible to heap corruption. Researcher Piotr Bania independently discovered the problem last September and reported it to Adobe.
A maliciously crafted PDF file could trigger the heap corruption condition. Once exploited, arbitrary code could be executed on the system running the vulnerable Adobe Reader.
Such arbitrary code could cause a variety of problems. Crashing Adobe Reader would be the least of those worries. Adobe advised people using its product to upgrade to 7.0.9, and strongly encouraged an upgrade to Adobe Reader 8 where possible.
The Adobe Reader has a broad userbase across multiple operating system platforms. Adobe may be more plagued than most companies with future security concerns about Reader as criminals attempt to get onto as many systems as possible, and if they can do so through a widely used product with a vulnerability, they will do so.
---
Tag: Adobe Reader
Add to  Del.icio.us |  Digg |  Reddit |  Furl
Get all the updates - 
About the Author:
David Utter is a business and technology writer for SecurityProNews and WebProNews.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
