Adobe Reader Extremely Critical Vulnerability

Randux · 03-06-2009, 05:34 AM

I haven't run bloze for years except in a VM where it can't hurt anybody.

bergman · 03-08-2009, 04:06 AM

Yesterday, when I was on a pr0n hunt, one of the sites was trying to open a pdf in a firefox tab, so I closed it pretty quick. I've now also stopped FF from auto-opening pdf's.

I dont know wether it's had any ill-effect. I've run rkhunter and no change there.

When I heard about this vulnerability (a week or so before this incident) I couldnt figure out wether linux was affected so I updated poppler and epdfview to the latest versions.

H_TeXMeX_H · 03-11-2009, 02:41 PM

Update:
http://www.adobe.com/support/securit...apsb09-03.html

Quote:

Adobe plans to make available Adobe Reader 9.1 for Unix by March 25.

win32sux · 03-12-2009, 02:35 AM

I wonder what takes Adobe so long to fix these things.

Are they introducing new features alongside the security fixes?

wsduvall · 03-12-2009, 07:30 AM

bergman,

Chances are the attack was targeted at Windows, so your probably fine. Interesting attack though...

bergman · 03-14-2009, 07:21 PM

Quote:

Originally Posted by wsduvall

bergman,

Chances are the attack was targeted at Windows, so your probably fine. Interesting attack though...

Fingers, toes, and eyes crossed!

rjw1678 · 03-26-2009, 01:05 PM

Adobe Reader 9.1.0 has been made available for download since the morning of 3/25/2009 at the Adobe web site. Also 8.1.4 is available for download at the Adobe web site.

Thank You,
Bob W.

H_TeXMeX_H · 03-26-2009, 01:49 PM

Well, I guess they finally fixed it. With a FLOSS app this would have taken at most a few days if the project was disorganized with one or two devs. Instead it takes over 1 month for a proprietary app.

win32sux · 04-28-2009, 02:20 PM

Just a heads up: Another problem has been found.