Slashdot Mirror

← Back to Stories (view on slashdot.org)

No JavaScript Needed For New Adobe Exploits

Posted by CmdrTaco on from the this-will-end-badly dept.

bl8n8r writes "More woes for Adobe as a security firm creates a proof-of-concept attack that injects malicious code as part of the update process. The user only needs to click a dialog box to execute the code and no JavaScript is needed to launch the exploit. The exploit affects Foxit as well as Adobe Acrobat software. This exploit is made possible through the host software allowing execution of system binaries. Not clear if it's multi-platform, but seems plausible."

5 of 187 comments (clear)

  1. Drop it like the disease it is by carlhaagen · · Score: -1, Flamebait

    Fuck Adobe and its obese Acrobat Reader. Really, throw that bloated, filthy piece of shitware to hell already and go with FoxIt. And, yes, I think my use of the word FUCK is warranted here.

  2. Closing the vulnerability door - the easy way by Drakkenmensch · · Score: 0, Flamebait

    Is it any wonder that I uninstalled adobe reader entirely? Reading a lone pdf once in a while isn't worth having a massive security flaw exploitable with a no-click hacking trick.

  3. Re:Linux is vulnerable too by RMS+Eats+Toejam · · Score: -1, Flamebait

    Your post is rational, logical, fair, and sensible. However, you said some bad things about Linux. Dedicated and mature followers this OS will mod you down appropriately.

    --
    Turning to a Linux advocate for thoughts on Microsoft is like asking Hitler how he felt about the Jews.
  4. Re:Linux is vulnerable too by RMS+Eats+Toejam · · Score: -1, Flamebait

    Most Linux users only need PNG for viewing scanned comic book pages. They don't get as sticky as their paper counterparts.

    --
    Turning to a Linux advocate for thoughts on Microsoft is like asking Hitler how he felt about the Jews.
  5. Re:Linux is more Secure than Windows by sexconker · · Score: -1, Flamebait

    Try running most Windows XP software and see what happens.

    Try running a Linux build from 8 and a half years ago and see what happens.

    My update-manager updates all my installed programs. Windows Update does Windows and Office, everything else is hodgepodge.

    Windows update updates windows.
    Microsoft update updates windows, office, all other ms software, and any WHQL drivers.

    I am very familiar with Windows, it is one of the reasons I switched to Linux.

    Troll more, fag.

    It is present in Adobe Reader, it has already been patched out of FoxIt and it never existed in XPDF.

    It's a bug in the PDF spec. It affects Adobe Acrobat, Adobe Reader, Foxit versions up to whatever, etc. etc..

    Linux is not immune but the singular fact that you are not running as root mitigates a lot of possible damage.

    No it doesn't. Malware doesn't need root access to do shit. Nothing is mitigated anymore than it is on Windows, which you shouldn't have be running as root on ever since fucking NT.