Adobe Doles Out Bug-Filled PDF Reader to Users

From Computerworld Gregg Keizer Adobe delivers an out-of-date version of Reader to users who download the popular application from its Web site, a security company warned today. The edition Adobe currently offers includes at least 14 security vulnerabilities that have been patched by the company ...

Adobe Reader: User-assisted execution of arbitrary code

Background Adobe Reader is a PDF reader released by Adobe. Description Multiple vulnerabilities have been reported in Adobe Reader: Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in the JBIG2 filter CVE-2009-0198. Mark Dowd of the IBM Internet Security Systems X-Force and...

Adobe ships fix PDF Reader zero-day

Adobe has released a security bulletin to patch a “critical” code execution flaw affecting the ubiquitous PDF Reader and Acrobat software. However, the patch is only available for Adobe Reader 9 and Acrobat 9. Earlier versions of the software are affected by the vulnerability — and in the wild...

Immunity Canvas: FOXIT_ACTION

Name| foxitAction ---|--- CVE| CVE-2009-0837 Exploit Pack| CANVAS Description| Foxit PDF Reader Action Overflow Notes| CVE Name: CVE-2009-0837 VENDOR: Foxit Software VersionsAffected: Foxit Reader 3.0 build 1506 Repeatability: References: http://www.foxitsoftware.com/pdf/reader/security.htm CVE...

Adobe Reader: User-assisted execution of arbitrary code

Background Adobe Reader formerly Adobe Acrobat Reader is a closed-source PDF reader. Description The Johns Hopkins University Applied Physics Laboratory reported that input to an unspecified JavaScript method is not properly validated. Impact A remote attacker could entice a user to open a...

Adobe Acrobat Reader JavaScript方式远程代码执行漏洞

BUGTRAQ ID: 29908 CVECAN ID: CVE-2008-2641 Acrobat Reader是一款流行的PDF文件阅读器。 Acrobat Reader的JavaScript方式存在输入验证错误，如果用户受骗打开了内嵌有恶意JavaScript内容的PDF文件的话就会导致执行任意指令。 Adobe Acrobat Professional = 7.0.9 Adobe Acrobat Professional 8.0 - 8.1.2 Adobe Reader = 7.0.9 Adobe Reader 8.0 - 8.1.2 Adobe -----...