Adobe's PDF Software Flawed

Security analysts from Symantec Corp. and VeriSign Inc.'s iDefense Intelligence say they have discovered a flaw in Adobe Systems Inc.'s Acrobat Reader software that allows hackers into computers hosting PDF files through trusted web links.

Exploits are carried out through a flaw that exists in a plug-in that enables Acrobat users to view PDF files within Web browsers (IE 6.0 Web browser and earlier versions, and Mozilla's Firefox browser).

In a example given by the analysts, hackers set up a a hostile Web site that links to another site's PDF file. Included in the link is malicious JavaScript code that will run on the unsuspecting user's computer once the link is clicked. The rouge script is initiated on the host server once the link is clicked.

One Symantec researcher said "Given that it is easy to exploit, I would expect that we will see this method used considerably in the coming days and weeks, until it is resolved".

• Rate this Post!

  Select Your Rating:

  • 5 Stars (Excellent!)
  • 4 Stars
  • 3 Stars
  • 2 Stars
  • 1 Stars (Poor)

• Share this Post

  Share With A Friend:

  Your Name Your Email

  Friend's Name Friend's Email

  Optional Message

  Send

• Print
• Social Bookmarking

  Add to Bookmarks: