Adobe Acrobat Reader
The attacks target a flaw in the way Acrobat handles PDF files

Web attacks target PDF flaw

Users urged to patch Acrobat hole

Written by Shaun Nichols in California

Advertisement

Security researchers are warning users to upgrade their version of Adobe's Acrobat Reader following reports of new vulnerabilities.

The attacks target a flaw in the way Acrobat handles PDF files within Internet Explorer which could allow an attacker to remotely execute code.

Adobe released a patch for the vulnerability on Wednesday. However, security firm Sans Institute reported on Friday that it had discovered malicious banner ads which exploit the flaw.

The banner ads install Trojan files which delete any competing malware on the user's system.

Sans Institute traced the ads back to a hosting service in The Netherlands, which has since been notified and has removed the malicious files.

Greg McManus, a researcher with iDefense Labs, was credited with discovering the flaw, which was disclosed to Adobe in October last year.

IDefense reported that the malicious PDF files being used in the attack are currently undetectable by most antivirus programs. The company has provided a number of vendors with samples.

Users are urged to upgrade Adobe Acrobat Reader to version 8.1.2, which patches the vulnerability and prevents the attack being launched.

Tags:

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

A stressed CIO

28 Aug 2008

9.73 MBComputing podcast 28 August 2008 More...

Virgin Train

22 Aug 2008

8.71 MBComputing podcast 21 August 2008 More...

School children using PCs

14 Aug 2008

9.23 MBComputing podcast 14 August 2008 More...

Poll

GARY MCKINNON EXTRADITION

GARY MCKINNON EXTRADITION

Should Gary McKinnon be extradited to the US for hacking into military computers?

Previous poll results

Spotlight

Hacker

Hacker runs up $12,000 Federal phone bill

Five year-old flaw exploited to place 400 long-distance calls   More...

Steve Wozniak

IDF: Woz on Woz

Apple II co-founder muses on life, love and the meaning...  More...

Prince

Fair use comes first in web video

Dancing baby sets legal landmark   More...

Justin Rattner

IDF: Intel predicts artificial intelligence in 40 years

Computers smarter than humans by 2048   More...

Primary Navigation