Why No Chatter About the Acrobat exploit?

FighterJetMom · Feb 23, 2009

There's a reliable report of an Acrobat zero-day in the wild.

I thought I'd hear about it here first, but no? :confused

FJM

TimW · Feb 23, 2009

http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-021212-5523-99

Courtesy of Chaslang

DavidGP · Feb 24, 2009

Funny enough we had chatted about this in admin, and today I was in work chatting to IT security manager and while we have looked at this, many zero day exploits dont go fully wild all the time and can be both released info by some security teams to highlight issues to new found malware, one to watch though.

further info https://forums.symantec.com/t5/blogs/blogarticlepage/blog-id/vulnerabilities_exploits/article-id/188 on this.

While anticipated fix for this could be a few weeks off, the best course of action is to keep OS and anti malware/virus applications fully upto date and safe surf and only open files sent from folk you trust and if PDFs for now maybe not unless digitally signed.

frapper · Feb 24, 2009

While we continue to investigate this issue, customers are advised to follow best practices and only open email attachments from people they trust. Disabling JavaScript in Adobe Reader may also help mitigate this threat. Enabling DEP for Adobe Reader will also help prevent this type of attack.
Click to expand...

Or just use Foxit and common sense.

dyamond · Feb 24, 2009

I was on a website the other day and I clicked on a part of the page (to bring me to another page on that site) and my FF froze. When I re-opened the browser using re-open pages you had open option, instead of the the page being opened to a site I was on, it was was opened to a webpage .pdf file and all that was on the page was a string of characters that was like WfgHlpmn and was 133 pages long..

I didnt get any viruses or anything from it, it was just really odd.

wildwolf220 · Feb 25, 2009

A couple of links.

http://www.adobe.com/support/security/advisories/apsa09-01.html

http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219

Log in or Sign up

Why No Chatter About the Acrobat exploit?

FighterJetMom Private First Class

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

frapper Private First Class

dyamond Imelda Marcos of Majorgeeks

wildwolf220 Oracle of Doom