Main | Adware/Spyware »

Sunday, December 11, 2011

Adobe .pdf Reader Critical Flaw

Adobe has warned of yet another critical flaw that effects most Windows users. If your version is 10.1.1 or earlier expect an update almost immediately. Plan B would have you using an alternative application such as Sumatra.

Posted by Matthew Carrick at 12:31.08 PM EST | Permanent Link

| Categories: Adobe, Alternative Apps, Security Alerts

Monday, June 06, 2011

Adobe Flash Update

Time to update your Windows Adobe Flash player. Remember that each browser (Internet Explorer, Firefox, Opera, etc.) needs to be updated individually. Chrome (bless its heart) will update automagically. Go to http://get.adobe.com/flashplayer and follow the instructions to upgrade.

Posted by Matthew Carrick at 1:07.03 PM EDT | Permanent Link

| Categories: Adobe, Online Apps, Software Tools

Friday, November 26, 2010

Adobe Reader X Released

This new Sandboxed version should help prevent Zero-day exploits that have, in the past, doomed Adobe Reader to the status of exploit magnet. Now, what happens in Adobe stays in Adobe. The download is here.

Me? I'm sticking with Foxit Reader running under Sandboxie. In fact, most of my 'Net apps run under Sandboxie. Better Safe Than Sorry.

Posted by Matthew Carrick at 2:23.13 PM EST | Permanent Link
Edited on: Saturday, November 27, 2010 2:00.58 PM EST

| Categories: Adobe, Alternative Apps, Headlines

Thursday, November 18, 2010

Adobe Software Patches

Adobe has released a critical update that patches at least two security holes in its PDF Reader and Acrobat software. Hopefully these patches will be the last before the new 'Sandboxed' version appears. The newest version is 9.4.1. - update to this version by clicking 'Help', then 'Check for Updates'.

Posted by Matthew Carrick at 10:58.09 AM EST | Permanent Link

| Categories: Adobe, Security Alerts

Friday, October 29, 2010

Adobe Flash, Reader and Acrobat Security Advisory

Adobe products are again opening up exploitable holes in Operating Systems of all types.
The news is here: http://www.adobe.com/support/security/advisories/apsa10-05.html

Instead of Adobe Reader try the alternative application, FoxitReader.
Posted by Matthew Carrick at 12:29.04 AM EDT | Permanent Link

| Categories: Adobe, Alternative Apps, Security Alerts

Tuesday, March 23, 2010

Adobe is the Winner!

Microsoft Word has been dethroned as the most likely point-of-entry for rogue software.

Files based on Reader were exploited in almost 49 per cent of the targeted attacks of 2009, compared with about 39 per cent that took aim at Microsoft Word. By comparison, in 2008, Acrobat was targeted in almost 29 per cent of attacks and Word was exploited by almost 35 per cent.

So, either use an alternative such as Foxit Reader or for a quick 'n dirty fix: Open Adobe Reader, click onEdit, Preferences, JavaScript, and uncheck the enable JavaScript box.

Posted by Matthew Carrick at 4:58.06 AM EDT | Permanent Link
Edited on: Thursday, October 28, 2010 11:59.07 PM EDT

| Categories: Adobe, Alternative Apps, Headlines, Security Alerts

Thursday, February 18, 2010

Adobe .PDF Reader Critical Fix

Adobe has announced a patch for its Reader that is a must have as always.

It appears Adobe's software is highly unsafe and worse, breaks quickly giving the evil-doers more time to exploit the openings. Oops.

Details at Krebs on Security. And, Aviv Raff On .NET has apparently found the horrible Adobe Download Manager will re-install the evil

bits so make sure you un-install it as well. Firefox users should disable or un-install the Adobe Download Manager Extension/Add-on.

Posted by Matthew Carrick at 10:50.46 PM EST | Permanent Link
Edited on: Thursday, October 28, 2010 11:59.00 PM EDT

| Categories: Adobe, Alternative Apps, Privacy Issues, Security Alerts

Friday, February 12, 2010

Adobe Flash Security Upgrade

Adobe has released an out-of-sequence update of its Flash Player that fixes two critical security holes in its Web browser plugin.

The latest version is now version 10.0.45.2. Visit here to check your version.

Also, remember that you will have to install the upgrade seperately for each browser you use so if you're like me well, Internet Explorer, Firefox, Opera and Chrome all need patching!

Posted by Matthew Carrick at 4:40.12 AM EST | Permanent Link
Edited on: Thursday, October 28, 2010 11:59.36 PM EDT

| Categories: Adobe, Best Practices, Security Alerts

Friday, October 09, 2009

Adobe Reader Critical Vulnerability

It appears the ever popular Adobe Reader (version 9.1.3 and earlier) has a gaping hole that could allow bad people to take over Windows installs. This problem as popped up before. One way to mitigate (but not eliminate) the threat is to disable Javascript in Adobe reader and/or change your browsers behavior to download .pdf files as opposed to view them. You also might want to try the free alternative called Foxit Reader which has a better record when it comes to security issues. Just sayin' . . .

Posted by Matthew Carrick at 8:37.37 PM EDT | Permanent Link
Edited on: Thursday, October 28, 2010 11:57.49 PM EDT

| Categories: Adobe, Alternative Apps, Privacy Issues, Security Alerts, Viruses-Trojans-Worms

Wednesday, March 11, 2009

.pdf Fixes Released

Adobe has released a newer fixed version of its Reader application that addresses previously documented problems. Those wishing to upgrade a previous release will have to wait until March 18th.

Those using the popular alternative, Foxit Reader, should upgrade their installed version by using the upgrade link under the help menu:

FoxitReader Update Menu

FoxitReader doing its thing:

FoxitReader Update Menu

Success!

FoxitReader Update Menu

Posted by Matthew Carrick at 10:40.56 AM EDT | Permanent Link
Edited on: Thursday, October 28, 2010 11:58.53 PM EDT

| Categories: Adobe, Alternative Apps, Security Alerts

Thursday, February 26, 2009

Adobe FlashPlayer Fix Released

The most recent Adobe Reader vulnerability has been addressed with several patches all rolled into one download. If you use both Firefox and Internet Explorer browsers you must download a fix for each browser. The fix is here: http://www.adobe.com/go/getflashplayer

It's worth noting here that originally Adobe stated that a fix was to be available on March 11th, 2009 but when a third-party released a patch much earlier they were moved to action. heh heh heh.

Posted by Matthew Carrick at 3:43.16 PM EST | Permanent Link
Edited on: Thursday, October 28, 2010 11:57.37 PM EDT

| Categories: Adobe, Viruses-Trojans-Worms

Friday, February 20, 2009

Adobe Reader Vulnerability

Evil-doers are actively exploiting a security hole in Adobe Reader. Users need only open a rogue .pdf file to have their system taken over.

Since Adobe doesn't plan to patch the problem until March 11th, 2009 users should either disable Javascript within Adobe Reader (Choose "Edit", "Preferences", "Javascript", and uncheck the box beside "Enable Acrobat Javascript") or use an alternative to Adobe Reader called Foxit Reader which is available here: http://www.foxitsoftware.com

Posted by Matthew Carrick at 10:01.43 AM EST | Permanent Link
Edited on: Thursday, October 28, 2010 11:57.58 PM EDT

| Categories: Adobe, Alternative Apps, Privacy Issues, Security Alerts, Viruses-Trojans-Worms

Thursday, October 16, 2008

Adobe Flash Upgrade

Adobe has released version 10 of its flash player. This release addresses the so-called Clickjacking attacks where a user could be tricked into clicking a link that would send them to a rogue website. The new version 10 for Windows may be downloaded here.
Posted by Matthew Carrick at 11:28.56 AM EDT | Permanent Link
Edited on: Thursday, October 28, 2010 11:59.46 PM EDT

| Categories: Adobe, Best Practices

Saturday, January 06, 2007

Adobe Acrobat .pdf Exploit

A serious vulnerabilty in Adobe Acrobat Reader versions prior to version 8 leaves Windows machines open to various attacks. Users, and lets face facts here, that means everyone, should upgrade to version 8.
If an upgrade is impossible or unfeasable then, until a patch is issued you should, according to Adobe, disable the Adobe Acrobat Reader plug-in for your Internet browser.
Adobe has the details here: http://www.adobe.com/support/security/advisories/apsa07-01.html
Posted by Matthew Carrick at 1:58.28 PM EST | Permanent Link
Edited on: Friday, October 29, 2010 12:00.26 AM EDT

| Categories: Adobe, Privacy Issues, Security Alerts

Thursday, August 18, 2005

Adobe Acrobat Security Alert

Both Acrobat and Acrobat Reader have a flaw that would allow an evil .pdf file to cause a buffer overflow. The resulting crash could allow the risk of malicious code execution. Affected versions are Reader and Acrobat 5.1, 6.0 to 6.0.3, and 7.0 to 7.0.2. Users are strongly encouraged to update to the latest version of the software NOW. Use the auto update feature built into the software or visit Adobe.
Posted by Matthew Carrick at 12:32.03 PM EDT | Permanent Link
Edited on: Thursday, October 28, 2010 11:51.01 PM EDT

| Categories: Adobe, Security Alerts, Viruses-Trojans-Worms