ATTENTION: You are viewing a page formatted for mobile devices; to view the full web page, click HERE.

Main Area and Open Discussion > Living Room

Vuln. Alert: Malformed URLs Crash Acrobat 9

<< < (4/5) > >>

Carol Haynes:
And I agree with mouser and others: Whenever Acrobat opens in the browser is practically denies my browser service because it freezes it up or takes forever to initialize or whatever. Acrobat opened up independently of the browser is okay--usually--but whoever decided Acrobat should be a browser plugin needs to be punished!
-Deozaan (September 14, 2008, 05:43 PM)
--- End quote ---

I think there is something wrong with your set up - I don't have that problem in Firefox or Internet Explorer. Maybe it is a reader issue (I am using the Pro version).

One of the thing Adobe always say is that leaving behind older versions of Acrobat when you upgrade causes problems. Old versions should be removed completely before installing a new major version. Maybe you should try a clear out of all Acrobat software and then reboot and reinstall the latest version.

Ehtyar:
One of the thing Adobe always say is that leaving behind older versions of Acrobat when you upgrade causes problems. Old versions should be removed completely before installing a new major version. Maybe you should try a clear out of all Acrobat software and then reboot and reinstall the latest version.
-Carol Haynes (September 14, 2008, 06:24 PM)
--- End quote ---
Clearly they take great care to ensure their applications function optimally *cough* *splutter*

Ehtyar.

mwb1100:
Denial of service is the technical term, regardless of any connotations associated with the phrase.
I wouldn't say they're blatantly lying, just exaggerating or sensationalizing the scope of the problem.
-mwb1100 (September 14, 2008, 06:09 PM)
--- End quote ---
How so, given that their use of this phrase is entirely legitimate?
-Ehtyar (September 14, 2008, 06:21 PM)
--- End quote ---
It may be a technical term, but apparently there is still some difference of opinion on it.  In my opinion it's a stretch to call this a denial of service - what service is being blocked/prevented/denied?

Since you suggested using Google to clear up any  misconception, here's what I get on the first results page for the search '"denial of service" definition', listing only the results that don't discuss only distributed denial of service attacks, which I think everyone can agree this is not:

A denial of service (DoS) attack is an incident in which a user or organization is deprived of the services of a resource they would normally expect to have.-http://searchsoftwarequality.techtarget.com/sDefinition/0,,sid92_gci213591,00.html
--- End quote ---
A denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a computer resource unavailable to its intended users.-http://en.wikipedia.org/wiki/Denial-of-service_attack
--- End quote ---
A type of crack attack that makes it difficult, if not impossible, for valid system users to access their computer or particular services?such as Web applications?on a computer.-http://www.yourdictionary.com/denial-of-service
--- End quote ---
A condition in which a system can no longer respond to normal requests.-http://www.pcmag.com/encyclopedia_term/0,2542,t=denial+of+service&i=41128,00.asp
--- End quote ---

I still don't think this meets these definitions. If you do, that's fine.

Ehtyar:
Denial of service is the technical term, regardless of any connotations associated with the phrase.
I wouldn't say they're blatantly lying, just exaggerating or sensationalizing the scope of the problem.
-mwb1100 (September 14, 2008, 06:09 PM)
--- End quote ---
How so, given that their use of this phrase is entirely legitimate?
-Ehtyar (September 14, 2008, 06:21 PM)
--- End quote ---
It may be a technical term, but apparently there is still some difference of opinion on it.  In my opinion it's a stretch to call this a denial of service - what service is being blocked/prevented/denied?

Since you suggested using Google to clear up any  misconception, here's what I get on the first results page for the search '"denial of service" definition', listing only the results that don't discuss only distributed denial of service attacks, which I think everyone can agree this is not:

A denial of service (DoS) attack is an incident in which a user or organization is deprived of the services of a resource they would normally expect to have.-http://searchsoftwarequality.techtarget.com/sDefinition/0,,sid92_gci213591,00.html
--- End quote ---
A denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a computer resource unavailable to its intended users.-http://en.wikipedia.org/wiki/Denial-of-service_attack
--- End quote ---
A type of crack attack that makes it difficult, if not impossible, for valid system users to access their computer or particular services?such as Web applications?on a computer.-http://www.yourdictionary.com/denial-of-service
--- End quote ---
A condition in which a system can no longer respond to normal requests.-http://www.pcmag.com/encyclopedia_term/0,2542,t=denial+of+service&i=41128,00.asp
--- End quote ---

I still don't think this meets these definitions. If you do, that's fine.


-mwb1100 (September 14, 2008, 09:20 PM)
--- End quote ---
Are you suggesting Acrobat provides no service? In any case, were it an infinite loop scenario you're probably looking at high CPU usage, which may conform to your definition.
Notice how each of your definitions is followed by the word 'attack'? The article never mentioned a 'denial of service attack', it simply refers to Acrobat freezing as 'denial of service'. You can find some examples of its usage here.

Ehtyar.

Deozaan:
So now we all know. The first Denial of Service Condition was in 1968 (or 2001, depending on how you look at it):

"I'm sorry Dave, I'm afraid I can't do that."

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version