Difference between revisions of "Adobe PDF Reader and Acrobat Zero-Day Exploit 9.2"
From ATTWiki
| Line 3: | Line 3: | ||
<br><br> | <br><br> | ||
Follow these steps to switch off JavaScript in Adobe immediately:<br><br> | Follow these steps to switch off JavaScript in Adobe immediately:<br><br> | ||
| + | * Adobe's [http://www.adobe.com/support/security/advisories/apsa09-07.html Security bulletin] | ||
* Read about the exploit and how to switch JavaScript off: [http://blogs.zdnet.com/security/?p=5119&tag=nl.e539 ZDNet Article] | * Read about the exploit and how to switch JavaScript off: [http://blogs.zdnet.com/security/?p=5119&tag=nl.e539 ZDNet Article] | ||
* More information: [http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214 Shadow Server Blog] | * More information: [http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20091214 Shadow Server Blog] | ||
<br> | <br> | ||
About [http://en.wikipedia.org/wiki/Zero_day_attack Zero-day attack]: "A zero-day (or zero-hour) attack or threat is a computer threat that tries to exploit computer application vulnerabilities that are unknown to others, undisclosed to the software vendor, or for which no security fix is available." | About [http://en.wikipedia.org/wiki/Zero_day_attack Zero-day attack]: "A zero-day (or zero-hour) attack or threat is a computer threat that tries to exploit computer application vulnerabilities that are unknown to others, undisclosed to the software vendor, or for which no security fix is available." | ||
Revision as of 17:21, 16 December 2009
This is an exploit that affects Adobe PDF Reader and Acrobat. It is very serious and has not been addressed by Adobe.
Follow these steps to switch off JavaScript in Adobe immediately:
- Adobe's Security bulletin
- Read about the exploit and how to switch JavaScript off: ZDNet Article
- More information: Shadow Server Blog
About Zero-day attack: "A zero-day (or zero-hour) attack or threat is a computer threat that tries to exploit computer application vulnerabilities that are unknown to others, undisclosed to the software vendor, or for which no security fix is available."
