ProSecure™ UTM9S
UTM9S Wins 4/5 Stars & Features NAS Integration
Posted By Netgear Threat Lab at 4:57 PM, April 29, 2009
Today, two zero-day security holes in Adobe Reader were announced. Affected versions included those running on Windows, Mac, and Unix based platforms. Attackers exploited the Adobe Reader JavaScript annotation function 'getAnnots()' and the custom Dictionary function (which also exists in the Adobe Acrobat JavaScript system) to execute arbitrary code with the privileges of the user running the application.
Instructions on how to exploit these security holes on Linux platforms can already be found on the Internet leading us to believe that we will start seeing malware exploiting these security holes any time now.
Before Adobe releases a new software update or patch to address the issue, we recommend disabling JavaScript in Adobe Reader to prevent from being hacked.
Posted by: Netgear Threat Lab at 4:57 PM
Categories: General , Malware , Netgear Threat Lab , Viruses
TrackBack URL: http://prosecure.netgear.com/cgi-bin/mt/mt-tb.cgi/20