Adobe Flaw May Be 'Worst' Bug Of 2007

Vikingod · Jan 7, 2007, 02:14 PM

Source: CRN
____________
Adobe has promised to patch buggy versions of its popular Reader software next week to close a cross-site scripting vulnerability that some researchers say has the potential to be the worst of all 2007.

The vulnerability in Adobe Reader and an associated browser plug-in was first publicized Wednesday by security firms, which said the bug could let hackers misuse trusted Adobe PDF (Portable Document Format) files as carriers of malicious JavaScript code.

Matth · Jan 7, 2007, 05:21 PM

The full scope seems a little uncertain, with the IE6 / Reader 7.0.8 combination mentioned as not being exploitable.

Ir is also uncertain what effect the manual update, providing one "7.0.9" file has on this. The update was offered for a previous vulnerability, as a solution for those who could not or would not update to Reader 8
http://www.adobe.com/support/securit...apsb06-20.html

Jan 7, 2007, 02:14 PM	#1
Vikingod Int'l Fish Liaison Join Date: Jul 2004 Location: By the light of lamp I sit and type... Posts: 16,197 Rep Power: 112 System Specs	Adobe Flaw May Be 'Worst' Bug Of 2007 Source: CRN ____________ Adobe has promised to patch buggy versions of its popular Reader software next week to close a cross-site scripting vulnerability that some researchers say has the potential to be the worst of all 2007. The vulnerability in Adobe Reader and an associated browser plug-in was first publicized Wednesday by security firms, which said the bug could let hackers misuse trusted Adobe PDF (Portable Document Format) files as carriers of malicious JavaScript code.

Jan 7, 2007, 05:21 PM	#2
Matth Flash Banner Hater Join Date: Jun 2002 Location: UK Posts: 3,426 Rep Power: 93 System Specs	The full scope seems a little uncertain, with the IE6 / Reader 7.0.8 combination mentioned as not being exploitable. Ir is also uncertain what effect the manual update, providing one "7.0.9" file has on this. The update was offered for a previous vulnerability, as a solution for those who could not or would not update to Reader 8 http://www.adobe.com/support/securit...apsb06-20.html __________________ Mary had a little lamb, Her father shot it dead Now Mary takes her lamb to school, Between two crusts of bread