ACROBAT 7-9 READER ALERT - PASS IT ON

Photos

pdf-sos

see larger image

uploaded by RoryKearney

This affects both PC and Mac.

Attackers Exploiting Unpatched Flaw In Adobe Reader, Acrobat

Hackers are exploiting an unpatched security hole in current versions of Adobe Reader and Acrobat to install malicious software when users open a booby-trapped PDF file, security experts warn.

...

But those at Shadowserver say Adobe Reader and Acrobat users can significantly reduce their exposure to such attacks by disabling Javascript within the application. To nix Javascript, select "Edit," "Preferences," "Javascript," and uncheck the box next to "Enable Acrobat Javascript."

In the past I have recommended the free version of Foxit Reader as a faster and more lightweight alternative for viewing PDF files. However, I have not yet been able to verify whether Foxit Reader may be similarly vulnerable. I will update this post if I receive an answer from Foxit.

Update, 10:34 a.m. ET: "Sherry" from Foxit wrote me back to say the company has no information to suggest Foxit is similarly vulnerable: "Currently Foxit Software have not suffered these problems. And we will pay attention to it in the future."

Also, Symantec has now posted its writeup on this flaw, saying it has received reports of targeted attacks against government, large enterprise and financial services organizations. "We have observed few exploits of this vulnerability in the U.S., China, Japan, Taiwan and the U.K. and continue to monitor for any signs of a widespread attack using this exploit."

FULL ARTICLE

http://voices.washingtonpost.com/securityfix/2009/02/attackers_exploiting_unpatched.html?hpid=sec-tech

* * * * *

Other possible fixes are using microsoft pdf reader for pc and using preview reader for mac. Also you can  turn off the java in mac acrobat reader, and possibly ie also has a java preference you can disable.

* * * * *

Your Next Adobe PDF May Be Infected
By Scott Budman

NBCBayArea.comupdated 39 minutes ago

One of the most popular software programs in the world is flawed.

http://www.msnbc.msn.com/id/29412277/

* * * * *

Still be cautious as there is no guarantee any of these fixes will stop you from getting infected.

* * * * *

I looked to see if this pdf alert has already been posted and didn't see it. If I am mistaken let me know in a comment and I will delete this post.