Office 2007 Product Key US-CERT Cyber Security Ale
 

Home | FAQ | Contact | Privacy & Use
Adobe Reader and Acrobat Affected by Multiple Vulnerabilities Original release date: October 06, 2010
Last revised: --
Source: US-CERT
Systems Affected
Adobe Reader 9.3.4 and earlier versions for Windows, Macintosh,Microsoft Office Enterprise 2007, and
UNIXAdobe Acrobat 9.3.4 and earlier versions for Windows and
MacintoshAdobe Reader 8.2.4 and earlier versions for Windows,Office 2007 Enterprise,
Macintosh, and UNIXAdobe Acrobat 8.2.4 and earlier versions for Windows
and Macintosh
Overview
Adobe has released Security Bulletin APSB10-21,
which describes multiple vulnerabilities affecting Adobe Reader and Acrobat.

Solution
Update
Adobe has released updates to address this
issue. You are encouraged to read Adobe Security Bulletin APSB10-21
and update vulnerable versions of Adobe Reader and
Acrobat.
Disable JavaScript in Adobe Reader and Acrobat

Disabling JavaScript may prevent some exploits. To disable JavaScript
in Acrobat, do the following:
Open Adobe Acrobat Reader.Open
the Edit menu.Choose the Preferences
option.Choose the JavaScript section.Uncheck the
"Enable Acrobat JavaScript" checkbox.
Disable
the display of PDF documents in the web browser
Preventing PDF
documents from opening inside a web browser will partially protect you against
this vulnerability. Applying this workaround may also protect you against future
vulnerabilities.
To prevent PDF files from automatically being opened in a
web browser,Office 2010 Product Key, do the following:
Open Adobe Acrobat
Reader.Open the Edit menu.Choose the
Preferences option.Choose the Internet
section.Uncheck the "Display PDF in browser"
checkbox.
Do not access PDF files from untrusted sources
Do not open unfamiliar or unexpected PDF files,Office 2007 Product Key, particularly those
hosted on websites or delivered as email attachments. Please see Cyber Security
Tip ST04-010.

Description
Adobe Security Bulletin APSB10-21
describes a number of vulnerabilities affecting Adobe Reader and Acrobat. An
attacker could exploit these vulnerabilities by convincing a user to open a
specially crafted PDF file.
These vulnerabilities could allow a remote
attacker to take control of your computer or cause it to crash.

References Security update available for Adobe Reader and Acrobat - <

Feedback can be directed to US-CERT.

Produced 2010 by US-CERT,Office 2007 Product Key, a government organization. Terms of use

Revision History
October 06, 2010: Initial release