Adobe Reader
Adobe's Reader and Acrobat could allow hackers to upload malicious programs

Adobe admits to critical software flaws

Reader and Acrobat vulnerable in IE7 on Windows XP

Written by Matt Chapman

Adobe has admitted that some of its software contains vulnerabilities that could leave computers open to attack, following information published on the Heise Security website.

Following the exposure, Adobe posted information on its Security Bulletins and Advisories page about the vulnerability.

The document and imaging company said that its Adobe Reader and Acrobat software could allow hackers to upload malicious programs onto a user's PC.

The problems are thought to affect only computers running Internet Explorer 7 on Windows XP.

Adobe said that it is working on a fix, but that the necessary updates might not be available until the end of October.

"Having researched and verified the vulnerability, Adobe expects to provide an update to versions 8.1 of Adobe Reader and Acrobat before the end of October that will resolve the issue," said the firm in an official statement.

Adobe added that, in the meantime, it will make information about a workaround available to users to allow them to protect themselves.

"As always, Adobe recommends users exercise scepticism and caution when in receipt of unsolicited email communications requesting user action, such as opening attachments or clicking web links," the company warned.

The issue echoes other critical problems announced earlier this week, which affected the company's Illustrator, GoLive and Pagemaker software.

However, in these cases, Adobe released updates to repair the problems at the same time as announcing the flaws.

A security bulletin will be published on the company's Security Bulletins and Advisories site when a fix for the current problem is ready.

Tags:

reader comments

related articles

Kaspersky falls through Online Scanner flaw

Security firm unaware of 'highly critical' vulnerability 11 Oct 2007

 

Hackers eye open source coding tools

Security firm warns of 'cross-build injection vulnerability' 10 Oct 2007

Microsoft rolls out nine fixes

Six 'critical' vulnerabilities patched in October update 10 Oct 2007

Fedora patches old OpenOffice flaw

Two weeks after main sponsor Red Hat plugged the same hole 05 Oct 2007

Apple patches QuickTime flaw

Windows vulnerability allowed scripted attacks 04 Oct 2007

IM flaw hits millions of AOL users

Users exposed to immediate high-risk attacks, warns security firm 02 Oct 2007

Attack code targets unpatched Adobe Reader flaw

Time running out for Adobe to patch 'critical' vulnerability 17 Oct 2007

Microsoft warns of new Word attacks

Remote code flaw being exploited 10 Jul 2008

Adobe issues critical fix

Holes patched in Reader and Acrobat 25 Jun 2008

related whitepapers

today's top stories

Learning from the credit crunch to avoid a broadband crunch

While it might be the most pressing issue de jour , the financial system isn’t the only area where government needs to... 10 Oct 2008

How careerism can warp IT procurement

Many working in IT put their career interests before those of their employer when weighing up purchasing options 10 Oct 2008

City in pressing need of skilled IT matchmakers

With the financial services sector plunging ever deeper into an M&A maelstrom, IT leaders are having their systems integration skills and due diligence expertise tested as never before 09 Oct 2008

The definitive guide to software development

Five key trends and five best practice tips to help you improve your programming capabilities 09 Oct 2008

Computing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security

We discuss the effect of shotgun mergers and acquisitions on financial services IT staff, and examine the industry regulator's plan to fine directors for information security breaches 09 Oct 2008

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job


IT Salary Checker

Check salary here

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Would you apply for a job that was advertised on Facebook or a similar social networking site?

Would you apply for a job that was advertised on Facebook or a similar social networking site?

The government is using Facebook to recruit IT staff - would you apply to such an ad?

Previous poll results

Latest audio and video articles

programming codeVideo

The definitive guide to software development

Five key trends and five best practice tips to help you improve your programming capabilities 09 Oct 2008

Podcast imageAudio

Computing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security

We discuss the effect of shotgun mergers and acquisitions on financial services IT staff, and examine the industry regulator's plan to fine directors for information security breaches 09 Oct 2008

Latest in-depth articles

Financial Services Authority buildingAnalysis

FSA threatens executives with fines

Senior management to be held accountable for security lapses at banks 09 Oct 2008

Comment

Broadband must be a spending priority

For the economic health of the nation, the government would do better to bankroll an optical fibre rollout rather than prop up profligate banks 09 Oct 2008

Advertisement

Primary Navigation