PDFs open critical hole in Internet Explorer
Print storyBotnet surprise
Posted in Software & Security, 1st December 2006 11:18 GMT
Free whitepaper – The future of SaaS and IT infrastructure management
A critical vulnerability has been identified in Adobe's Acrobat and Reader software which affects Internet Explorer users.
As well as causing crashes, the frailty could allow a botnet to take control of the whole computer when a PDF is opened within Explorer.
The hole is present in Acrobat Standard and Professional versions 7.0.0 to 7.0.8, and Adobe Reader 7.0.0 to 7.0.8. Only Microsoft's browser is vulnerable.
Adobe's programmers are working on a patch, which should be available on its support site soon. In the meantime, deleting AcroPDF.dll from the will prevent Explorer from opening PDFs in the browser window.
Adobe's advisory is here. ®
Free whitepaper – Impact of the dramatic increase in devices on the cost to support
Should your email live in the cloud: a comparative cost analysis
Hosted security IT manager's guide
Jump start your Application Security initiatives
Securing your Apache web server with a Thawte digital certificate
Sign up, sign up for The Register IT security newsletter
Former top Sun exec mourns end of a franchise
Win an HTC Touch Diamond2!
Disties braced for autumn reseller collapses