Channel Register

Comments on: Adobe update foils Reader and Acrobat exploits

Reader 5.1? 

Posted Tuesday 24th June 2008 13:28 GMT

I'm still using 5.1 on my w2k box - is it safe?

It's not a complete install package . . . 

Posted Tuesday 24th June 2008 13:35 GMT

Gates Halo

For the first time in quite a while, this update is NOT a complete re-installation of Adobe Reader. It's just a 2.2MB msi installer (for Windows at least) package.

This is a good deal better for sysadmins - I can deploy to 100 computers spread over 6 sites without anyone moaning about the download/install time!

Adobe??? 

Posted Tuesday 24th June 2008 15:53 GMT

I use Foxit instead - a nice relief from all those annoying Adobe pop-ups.

"All platforms" == Windows and Mac? 

Posted Tuesday 24th June 2008 17:13 GMT

Does anyone here know whether the problem only affects Windows and Mac OS versions Acrobat and Reader, or has Adobe simply not bothered to release security updates for Linux and all other platforms the software in question runs on?

Another vote for Foxit! 

Posted Tuesday 24th June 2008 17:56 GMT

I also use Foxit - much cleaner and faster (2.2MB vs. 22MB).

@ thomas k 

Posted Tuesday 24th June 2008 18:39 GMT

Happy

I still use 5.1 distiller (it still works on Vista) and GhostScript to actually view PDF's.

Smiley face 'cos I'm a smug bastard.

Safe (non-admin) computing prevents PDF exploits too 

Posted Tuesday 24th June 2008 23:35 GMT

I've not seen one of these things before this week, when I had the fortune to see it in action on an older machine. Some unrelated forum site running PHP tried to push some malware on a machine I used. A handful of executable files in %temp%, but no further damage beyond that.

The machine wasn't mine, but I told its owner what happened and I later got to apply a tool I hacked together that prevents downloaded executables from running. Said tool removes execute permissions from new files in limited user-writeable areas.

Lockdown hack or not, it was amusing to see this thing try to do damage and fail miserably. Sure, an updated Adobe Reader fixed it permanently, but were this a zero-day exploit it'd have fallen flat right on day zero.

+1 for foxit 

Posted Wednesday 25th June 2008 14:12 GMT

and not just for security reasons, it's simply smaller, faster, cleaner, better...

http://veroblog.wordpress.com/2007/08/13/why-im-using-foxit-reader-for-acrobat-pdf-files/