Patch/Configuration Management, Vulnerability Management

Adobe Reader attacks continue two years after patch

Share

JavaScript-based attacks taking advantage of an Adobe Reader and Acrobat vulnerability patched in 2010 are continuing in waves, Symantec researchers said this week. The security bug relates to an invalid TIFF value that corrupts the image file format's parser, senior software engineer Jason Zhang said in a blog post. Symantec said its technology has blocked more than 10,000 malicious PDF file attempts over the past two weeks, with the largest campaign coming on Feb. 16, two years to the date after the flaw was patched. Users are advised to update their Reader and Acrobat software.

Related

Misconfigured FleetPanda server leaks fuel sector data

Included among the files in the unsecured 193 GB database were information regarding fuel and petroleum shipments, invoices, and delivery tickets to and from companies, pipelines, and industries across several states, including California, Colorado, Oklahoma, Oregon, and Texas between 2019 and August 2024.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.