New versions of Adobe Reader, Acrobat to arrive Tuesday

Share this article:

As part of its second-ever quarterly security update, Adobe on Tuesday plans to release new versions of Reader and Acrobat to address a number of flaws, including one that is being exploited in live attacks.

Adobe is set to distribute Reader and Acrobat versions 9.1.3 and 8.1.6 for Windows, Mac and UNIX, and version 7.1.3 for Windows and Mac. The updates, to coincide with Microsoft's monthly patch release, will plug a number of vulnerabilities, including a critical bug present in version 9.1.3 that is being leveraged in targeted but limited in-the-wild attacks.

Users can protect themselves from an exploit by enabling Data Execution Prevention (DEP), a Vista security feature that prevents an application from executing code in certain memory regions, or by disabling JavaScript, according to an Adobe bulletin released Thursday.

In May, Adobe announced that it would begin distributing patches on a regular cycle, amid concern that the company was not doing enough to secure the users of its popular PDF products from a number of high-profile vulnerabilities earlier this year.

The patches are being distributed four times a year, coincident with at least four of the same days that Microsoft pushes out its fixes.

"Enterprises have already optimized their process where they're ready to receive security updates on Patch Tuesday," Brad Arkin, Adobe's director of software security and privacy, told SCMagazineUS.com in May. "The feedback from our customers is that it's not any additional work to add updates for Reader. We're hoping to get people in the habit of applying these updates."

However, Tuesday's release was delayed by one month after Adobe was set back after it released an out-of-cycle patch on July 31.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

Federal Trade Commission appoints new chief technologist

The government agency has announced Ashkan Soltani as its new chief technologist, according to a release.

Cybercriminals continue to piggyback on Ebola news

Email samples discovered by researchers at Trustwave reveal how attackers are infecting users with the DarkComet Remote Access Trojan.

ISA president urges state AGs to expand understanding of cybercrime

Speaking at a National Association of State Attorneys General conference, ISA's Larry Clinton asked the AGs to step up efforts to get more resources.