Skip to main content
Add as a preferred source on Google


Adobe To Release Fix for Acrobat Security Hole

  • By Dian Schaffhauser
  • 01/08/10

Adobe will shortly release an update to address a vulnerability in Adobe Reader and Acrobat 9.2 and earlier versions that was first reported in November.

The security hole is caused by boundary errors in the newplayer() JavaScript method in multimedia.api that can cause a computer to execute arbitrary code when a user opens a modified PDF file. The module, according to Core Security Technologies, runs a malicious Web site and waits for a user to trigger the exploit by connecting to the Web site through the PDF.

Adobe said it had reports that the vulnerability was being actively exploited. The company said updates addressing the problem would be available Jan. 12, 2010.

In other Adobe security news, the company released security patches for Illustrator CS4 and CS3 Thursday. The updates for both Mac OS X and Windows operating systems are designed to address issues that could subject systems to "arbitrary code execution," according to information released by Adobe.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • two business people working on a laptop with cybersecurity icons

    Why Lower Phishing Volume Doesn't Mean Lower Cyber Risk for the Education Sector

    As threat actors adopt more targeted and convincing tactics, education leaders need practical ways to reduce risk without undermining the open, connected environments their institutions depend on.

  • abstract electronic circuit board 3d rendering

    Content Infrastructure, Governance Lag Behind Agentic AI Adoption

    AI agents have moved into mainstream enterprise use, but the content infrastructure needed to support them has struggled to keep up, according to a new report from cloud content management company Box.

  • interconnected blue glass cubes

    Anthropic Expands Enterprise Deployment Options for Claude Desktop

    Anthropic is introducing new enterprise deployment options for Claude Desktop, saying organizations that use the app through Amazon Web Services, Google Cloud, and Microsoft Foundry can now access the full desktop experience across chat, Claude Cowork, and Claude Code.

  • abstract smartphone translucent screen displaying AI interface

    Apple Unveils Redesigned Siri AI

    At its recent Worldwide Developers Conference, Apple announced Siri AI, a redesigned version of its voice assistant that Apple describes in its own announcement as "a profoundly more capable and personal assistant." The update is intended to make Siri more conversational, more context-aware, and more useful across iPhone, iPad, Mac, Apple Watch, and Vision Pro.