20401
General Software Discussion / Acrobat bug can lead to malware installs without even opening an infected file
« Last post by mouser on March 06, 2009, 03:00 AM »If you've been living in fear of opening any suspicious PDF files since we let you know about a still-unpatched bug in Adobe Acrobat that could expose your PC to a malware infection, we've got some bad news for you: it turns out that, due to how the bug is integrated into the software, it's possible for malware authors to still get into your system, even if you never actually open an infected file.
The bug affects only Windows computers running Acrobat version 7 or later. Because the program doesn't correctly read PDF files containing a certain type of compressed image, a specially-crafted PDF can at once crash Acrobat and inject its own code into the system, beginning a malware installation. Even though this bug's been public knowledge for weeks, and exploits are already out taking advantage of it, Adobe has been delaying its release of a patch to fix it, scheduled to be available on the 11th.
from http://www.downloads...n-originally-tought/

Recent Posts

