Proactive IT Security
 

Critical udates for Adobe Acrobat and Reader

2010-06-30 [Software advisories]

Adobe has released updates for several critical vulnerabilities in Adobe Acrobat 9.3.2 and Reader 9.3.2 and earlier versions of these products.

Critical is Adobe's highest vulnerability rating and could when exploited allow malicious native-code to execute, potentially without a user being aware.

Among the vulnerabilities addressed by these updates are

  • the so-called PDF /LAUNCH vulnerability which was discussed in our Security articles 7 April and 22 April this year.
  • the vulnerability that was exploited in the wild, addressed in our Security advisory 11 June this year.

More information is available in Adobe's security bulletin 10-15. Download link to upgrade current installation to the newest version is also available from this security bulletin.
Information about these updates is also available on Adobe Reader Blog, where the PDF /LAUNCH functionality is particularly addressed.

Norman recommends that users update their affected Adobe products as soon as possible.