Adobe PDF vulnerability fix slated for May 12

Share this article:
Adobe said it plans to release an update by May 12 for the recently disclosed Reader and Acrobat vulnerability.

In doing so, Adobe will push out Windows updates for Reader and Acrobat versions 7, 8 and 9 and Macintosh and Unix updates for versions 8 and 9, David Lenoe, Adobe's security program manager, said Friday afternoon in a blog post.

The company also has confirmed a second vulnerability in its Reader for Unix software, which also is slated to be fixed in next week's update, Lenoe said. That bug does not affect Windows or Mac versions, but Adobe is investigating whether it can "reproduce an exploitable scenario."

Proof-of-concept code for both vulnerabilities has been published on the web; however, Adobe is not aware of any live attacks.

As users await the patches, Adobe has suggested they disable JavaScript in Reader and Acrobat, Lenoe said. In addition, the company has contacted leading anti-virus providers so they can build in protection to their products.

This is the second major zero-day PDF flaw to strike the popular viewer this year.


Share this article:

Sign up to our newsletters

More in News

Report: UK police push for required mobile phone PWs

The Metropolitan Police have reportedly lobbied for two years to enact the standard.

JPMorgan Chase customers targeted in massive phishing campaign

JPMorgan Chase customers targeted in massive phishing campaign

Roughly 500,000 emails have been sent out so far as part of a massive multifaceted phishing campaign targeting customers of JPMorgan Chase.

Study: Organizations lack training, budget to thwart insider threats

Study: Organizations lack training, budget to thwart insider ...

Of the 355 IT and security professionals surveyed, a majority indicated that they were ill-equipped to thwart a possible insider threat.