| Pages: [1] :: one page |
| Author |
Thread Statistics | Show CCP posts - 0 post(s) |
Vendorella
Montreal Irishmen
0
   |
Posted - 2011.12.10 22:47:00 -
[1] - Quote
TD;DR - Be very careful opening PDF documents until Adobe releases a patch later this coming week.
Attackers Leverage Zero Day Reader Flaw in the Wild; Patch Coming
Quote:According to ComputerWorld and Symantec, Attackers are currently leveraging a zero day vulnerability in Adobe Reader in targeted attacks against telecommunications, manufacturing, computer hardware, and chemical companies, as well as defence sector organisations like Lockheed Martin.
The attacks may have started as early as the beginning of November, and arrive as a targeted phishing email with a malicious PDF attachment. If you open said attachment, your computer gets infected with information stealing malware.
Earlier this weak, Adobe confirmed this zero day flaw in a Security Advisory. The vulnerability affects all current versions of Reader and Acrobat running on any platform. Though they have not released a fix for the flaw yet, they plan to sometime next week
Article link here: http://watchguardsecuritycenter.com/2011/12/09/attackers-leverage-zero-day-reader-flaw-in-the-wild-patch-coming/ |
Corina Jarr
Spazzoid Enterprises
Purpose Built
83
|
Posted - 2011.12.10 22:50:00 -
[2] - Quote
Vendorella wrote:TD;DR - Be very careful opening PDF documents until Adobe releases a patch later this coming week.
Attackers Leverage Zero Day Reader Flaw in the Wild; Patch ComingQuote:According to ComputerWorld and Symantec, Attackers are currently leveraging a zero day vulnerability in Adobe Reader in targeted attacks against telecommunications, manufacturing, computer hardware, and chemical companies, as well as defence sector organisations like Lockheed Martin.
The attacks may have started as early as the beginning of November, and arrive as a targeted phishing email with a malicious PDF attachment. If you open said attachment, your computer gets infected with information stealing malware.
Earlier this weak, Adobe confirmed this zero day flaw in a Security Advisory. The vulnerability affects all current versions of Reader and Acrobat running on any platform. Though they have not released a fix for the flaw yet, they plan to sometime next week Article link here: http://watchguardsecuritycenter.com/2011/12/09/attackers-leverage-zero-day-reader-flaw-in-the-wild-patch-coming/
And this shouldn't be a problem if you don't open emails from unknown/unconfirmed sources.
Thanks for the message anyway.
Of and should be in OOPE, as this is for EVE talk. |
Vyl Vit
Cambio Enterprises
121
|
Posted - 2011.12.10 23:03:00 -
[3] - Quote
http://www.adobe.com/support/security/advisories/apsa11-04.html
From the horse's mouth.
To her it doesn't matter much.-á It's chasms have been leapt, and she leans upon the skepticism of her chosen fate. |
KaarBaak
152
|
Posted - 2011.12.10 23:06:00 -
[4] - Quote
Running the current version of Reader in 'protected mode' (which is enabled by default) and you're immune to this.
Basic end-user computing 101
|
Abdiel Kavash
Paladin Order
Fidelas Constans
209
|
Posted - 2011.12.10 23:30:00 -
[5] - Quote
tl;dr: that's what you get when your document format allows running executable files. |
Little Delicious
Imperium's Dark Legion
38
|
Posted - 2011.12.10 23:38:00 -
[6] - Quote
So you mean there's going to be an update for acrobat reader? Haven't gotten one in a few hours, was wondering why the next one was so late. |
Anya Ohaya
School of Applied Knowledge
Caldari State
38
|
Posted - 2011.12.11 03:11:00 -
[7] - Quote
Just use a non-adobe PDF reader. They don't support all the "features" that allow these attacks in the first place. |
Hark Hanam
Elarion Nation
7
|
Posted - 2011.12.11 03:14:00 -
[8] - Quote
here's a PDF that explain everything in detail :
...
Sorry. |
Morganta
Peripheral Madness
The Midget Mafia
517
|
Posted - 2011.12.11 03:15:00 -
[9] - Quote
Hark Hanam wrote:here's a PDF that explain everything in detail :
...
Sorry.
idea stealer
The American public's reaction to the change was poor and the new cola was a major marketing failure. The subsequent reintroduction of Coke's original formula, re-branded as "Coca-Cola Classic", resulted in a significant gain in sales, leading to speculation that the introduction of the New Coke formula was just a marketing ploy |
| |
|
| Pages: [1] :: one page |
| First page | Previous page | Next page | Last page |