,
Office Professional 2007
Home | FAQ | Contact | Privacy & Use
Adobe Reader and Acrobat Affected by Multiple Vulnerabilities Original release date: October 06, 2010
Last revised: --
Source: US-CERT
Systems Affected
Adobe Reader 9.3.4 and earlier versions for Windows, Macintosh, and
UNIXAdobe Acrobat 9.3.4 and earlier versions for Windows and
MacintoshAdobe Reader 8.2.4 and earlier versions for Windows,
Macintosh,
Office Professional Plus 2010, and UNIXAdobe Acrobat 8.2.4 and earlier versions for Windows
and Macintosh
Overview
Adobe has released Security Bulletin APSB10-21,
which describes multiple vulnerabilities affecting Adobe Reader and Acrobat.
Solution
Update
Adobe has released updates to address this
issue. You are encouraged to read Adobe Security Bulletin APSB10-21
and update vulnerable versions of Adobe Reader and
Acrobat.
Disable JavaScript in Adobe Reader and Acrobat
Disabling JavaScript may prevent some exploits. To disable JavaScript
in Acrobat,
Office 2007 Product Key, do the following:
Open Adobe Acrobat Reader.Open
the Edit menu.Choose the Preferences
option.Choose the JavaScript section.Uncheck the
"Enable Acrobat JavaScript" checkbox.
Disable
the display of PDF documents in the web browser
Preventing PDF
documents from opening inside a web browser will partially protect you against
this vulnerability. Applying this workaround may also protect you against future
vulnerabilities.
To prevent PDF files from automatically being opened in a
web browser, do the following:
Open Adobe Acrobat
Reader.Open the Edit menu.Choose the
Preferences option.Choose the Internet
section.Uncheck the "Display PDF in browser"
checkbox.
Do not access PDF files from untrusted sources
Do not open unfamiliar or unexpected PDF files, particularly those
hosted on websites or delivered as email attachments. Please see Cyber Security
Tip ST04-010.
Description
Adobe Security Bulletin APSB10-21
describes a number of vulnerabilities affecting Adobe Reader and Acrobat. An
attacker could exploit these vulnerabilities by convincing a user to open a
specially crafted PDF file.
These vulnerabilities could allow a remote
attacker to take control of your computer or cause it to crash.
References Security update available for Adobe Reader and Acrobat - <
Feedback can be directed to US-CERT.
Produced 2010 by US-CERT,
Office Professional 2007, a government organization. Terms of use
Revision History
October 06,
Office 2007, 2010: Initial release
Office Professional 2007 US-CERT Cyber Security Al
Linear Mode
