Critical Vulnerability in Adobe Reader

Adobe Security Bulletin APSA09-01 has been released:

"Buffer overflow issue in versions 9.0 and earlier of Adobe Reader and Acrobat

Release date: February 19, 2009

Vulnerability identifier: APSA09-01

Bid number: 33751

Platform: All platforms

A critical vulnerability has been identified in Adobe Reader 9 and Acrobat 9 and earlier versions. This vulnerability would cause the application to crash and could potentially allow an attacker to take control of the affected system. There are reports that this issue is being exploited.

Adobe is planning to release updates to Adobe Reader and Acrobat to resolve the relevant security issue. Adobe expects to make available an update for Adobe Reader 9 and Acrobat 9 by March 11th, 2009. Updates for Adobe Reader 8 and Acrobat 8 will follow soon after, with Adobe Reader 7 and Acrobat 7 updates to follow."

See Adobe Releases Security Bulletin for Critical Vulnerability for US-Cert recommended work-around actions to mitigate the risks in this vulnerability.





Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...