dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
407
share rss forum feed


siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17
Reviews:
·Bell Sympatico

1 recommendation

McAfee spots Adobe Reader PDF-tracking flaw

quote:
McAfee said it has found a vulnerability in Adobe Systems' Reader program that reveals when and where a PDF document is opened.

The issue is not a serious problem and does not allow for remote code execution, wrote McAfee's Haifei Li in a blog post. But McAfee does consider it a security problem and has notified Adobe. It affects every version of Adobe Reader, including the latest version, 11.0.2, Li wrote.

McAfee recently detected some "unusual" PDF samples, Li wrote. McAfee withheld some key details of the vulnerability, but did generally describe it.

The issue occurs when someone launches a link to another file path, which calls on a JavaScript API (application programming interface). Reader warns a user when they are going to call on a resource from another place, such as a link on the Internet.
»www.cso.com.au/article/460356/mc···ng_flaw/


Dustyn
Premium
join:2003-02-26
Ontario, CAN
kudos:11

McAfee actually discovered a vulnerability in something...?
Unfortunately, I find their own software to be nothing like it once was back in the day.



siljaline
I'm lovin' that double wide
Premium
join:2002-10-12
Montreal, QC
kudos:17

1 recommendation

Maybe McAfee is looking for some PR



therube

join:2004-11-11
Randallstown, MD
Reviews:
·Comcast
·Verizon Online DSL

1 recommendation

reply to siljaline

quote:
McAfee suggests that Adobe Reader users disable JavaScript
And like who does not do that by default.
Oh, wait, Adobe enables it by default .