Adobe plans emergency fix for Reader, Acrobat

Adobe plans to release an out-of-cycle patch next week for a "critical" PDF flaw disclosed at last week's Black Hat conference, the company announced Thursday. The update to Reader 9.3.3 for Windows, Macintosh and UNIX and Acrobat 9.3.3 for Windows and Mac is expected to fix a number of vulnerabilities, including one revealed by researcher Charlie Miller at last week's show. That flaw, caused by an integer overflow error in the way the PDF viewer parses fonts, could lead to memory corruption or code execution. Adobe was considering releasing the fix during its normal quarterly cycle in October, but decided otherwise, even though there are no reported exploits. — DK

More in News

Privacy-bolstering "Apps Act" introduced in House

The bill would provide consumers nationwide with similar protections already enforced by a California law.

Microsoft readies permanent fix for Internet Explorer bug used in energy attacks

Microsoft is prepping a whopper of a security update that will close 33 vulnerabilities, likely including an Internet Explorer (IE) flaw that has been used in targeted website attacks against the U.S. government.

Weakness in Adobe ColdFusion allowed court hackers access to 160K SSNs

Up to 160,000 Social Security numbers and one million driver's license numbers may have been accessed by intruders.