Slashdot Mirror

← Back to Stories (view on slashdot.org)

Microsoft Helps Adobe Block PDF Zero-Day Exploit

Posted by Soulskill on from the damage-control dept.

CWmike writes "Microsoft has urged Windows users to block ongoing attacks against Adobe's popular PDF viewer by deploying one of Microsoft's enterprise tools. Adobe echoed Microsoft's advice, saying the Enhanced Migration Experience Toolkit (EMET) would stymie attacks targeting Reader and Acrobat. Called 'scary' and 'clever,' the in-the-wild exploit went public last week when security researcher Mila Parkour reported it to Adobe after analyzing a rogue PDF document attached to spam. Adobe first warned users Wednesday of the threat, but at the time gave users no advice on how to protect themselves until a patch was ready. Microsoft stepped in on Friday. 'The good news is that if you have EMET enabled ... it blocks this exploit,' said Fermin Serna and Andrew Roths, two engineers with the Microsoft Security Response Center in an entry on the group's blog." A Symantec blog post suggests the people exploiting this vulnerability may be the 'Aurora' group responsible for the attacks on Google late last year.

4 of 93 comments (clear)

  1. Dear Microcock by Anonymous Coward · · Score: -1, Troll

    I'm fucking your dead great grandmother right up the ass!

  2. What does it say about your company... by Locke2005 · · Score: -1, Troll

    When Micosoft does something that isn't evil, it's considered news?

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
    1. Re:What does it say about your company... by Anonymous Coward · · Score: 0, Troll

      MS, Adobe, and a new virus walk into a bar ... and the punchline is the word 'scary' isn't applied to using MS products. Although it scares the hell out of me, being a strictly homosexual guy.

  3. Its not zero day ... by BitZtream · · Score: -1, Troll

    unless its the day it was found. It can't be a 0 day exploit for more than 24 hours. The next day ends that naming convention.

    Stop freaking calling every exploit 0 day.

    When you're well past a week old, why the fuck do you keep calling it 0 day?

    --
    Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager