Frank Klein has written to let us know that there are new vulnerabilities in Adobe Acrobat and Acrobat Reader that have the potential for code execution as a result of incorrect argument handling in the ActiveX control for IE. There is no patch currently available and Adobe is offering a mitigation of deleting the control. FrSIRT has provided a kill bit option that you can set that should disable the control.
The vulnerable versions are: Adobe Standard, Reader & Professional 7.0.0 - 7.0.8 http://www.frsirt.com/english/advisories/2006/4751 http://www.adobe.com/support/security/advisories/apsa06-02.html |
Toby 68 Posts Nov 29th 2006 |
Thread locked Subscribe |
Nov 29th 2006 1 decade ago |
Sign Up for Free or Log In to start participating in the conversation!