Sicurezza IT proattiva
 

Critical vulnerability in Adobe Reader and Acrobat (UPDATED)

First published: 2010-09-09
Updated: 2010-09-15

A critical vulnerability has been discovered in Adobe Reader version 9.3.4, Acrobat 9.3.4 and earlier versions.

Critical is Adobe's highest vulnerability rating and could when exploited allow malicious native-code to execute, potentially without a user being aware.

It has been reported that exploits that utilize this vulnerability are in the wild.

As of this writing no updates are available.

More information is available in Adobe's security advisory 10-02.

This security advisory will be updated when more information is available.

Update 15 September

Adobe has announced that security updates for Acrobat and Reader are being prepared for release in week 40. Presumably this vulnerability will be also fixed then.